Edit tour

Windows Analysis Report
https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uce

Overview

General Information

Sample URL:	https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R7
Analysis ID:	1541599
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1724,i,6876457295401396945,10357646343283526744,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64=" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://banner.au-1.mimecastcybergraph.com/tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49835 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49989 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49835 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64= HTTP/1.1Host: image-processing-service.au-1.mimecastcybergraph.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png HTTP/1.1Host: banner.au-1.mimecastcybergraph.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: banner.au-1.mimecastcybergraph.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://banner.au-1.mimecastcybergraph.com/tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.pngAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: banner.au-1.mimecastcybergraph.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nmpVEuXpZBnKlaA&MD=lrd4yzb4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nmpVEuXpZBnKlaA&MD=lrd4yzb4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: image-processing-service.au-1.mimecastcybergraph.com
Source: global traffic	DNS traffic detected: DNS query: banner.au-1.mimecastcybergraph.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.9:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.9:49989 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/11@8/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1724,i,6876457295401396945,10357646343283526744,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1724,i,6876457295401396945,10357646343283526744,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
image-processing-service.au-1.mimecastcybergraph.com	3.106.27.59	true	false	unknown
banner.au-1.mimecastcybergraph.com	18.245.46.89	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://banner.au-1.mimecastcybergraph.com/tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png	false		unknown
https://banner.au-1.mimecastcybergraph.com/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.106.27.59	image-processing-service.au-1.mimecastcybergraph.com	United States	16509	AMAZON-02US	false
18.244.164.80	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
18.245.46.89	banner.au-1.mimecastcybergraph.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.9
192.168.2.5
192.168.2.12

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541599
Start date and time:	2024-10-25 00:37:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/11@8/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 216.58.206.46, 66.102.1.84, 34.104.35.123, 192.229.221.95, 20.3.187.198, 40.69.42.241, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64=

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:38:22 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9815102550529353
Encrypted:	false
SSDEEP:	48:8M3dZT4gHc+ZidAKZdA1P4ehwiZUklqehBy+3:8MjE/+zOey
MD5:	D16B6A4A1BC18E8C7A79DC5D8DCD7DD7
SHA1:	924728DECA7D36F6973CF9AB19AF4AD3F81A99AD
SHA-256:	6F9856631959261B3F96CAD8E9DD8A3A5E6D6006BF1B5A1C4134710B4462FB18
SHA-512:	80E69C5B08FEF487317C2B4F9EFCB6A4E5C82C37C80EB3EB2DBEA9CD2CCD1ADEE5F967AB3B6CCF1B693E2AC7A023831F9CE0413A6D7DB37801C294E0B602A739
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....$4ne&....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IXY.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VXY.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VXY..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VXY............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:38:21 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9975916838325722
Encrypted:	false
SSDEEP:	48:88dZT4gHc+ZidAKZdA1+4eh/iZUkAQkqehOy+2:8OE/+CF9Qny
MD5:	75FFF582549D4BF45E424165E394C022
SHA1:	87320C10ED14ED47093456FB17E75B7CA62A2810
SHA-256:	F46F1B2B98EB9DA040D55EBF0A46D0978CE37E42ABEC2684BEED8A8231E08CB2
SHA-512:	12C9E6FF319806D8801DB416C9273A0B59981D9F9686CC4D72690CA1E51404557A0240E7F96FD67B9B776DE144FB9632652E10A6ED26CC740E6337CFD1E3BFB3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'n$ne&....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IXY.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VXY.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VXY..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VXY............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.009737389553453
Encrypted:	false
SSDEEP:	48:8PdZT4VHc+ZidAKZdA1404eh7sFiZUkmgqeh7scy+BX:8bEi+vInay
MD5:	AD7B83B094622CC19F43AFBB4D5271DC
SHA1:	5C29A5824C767A09FE2055787951D350A374CAFE
SHA-256:	90C0CF2F83583F4E8172F275705915C1A16F96C73F4A4326FE7FCF190BDD31A1
SHA-512:	8701727BC2A14F26D4B1F600846F5DC933A7289CF5B35AB7C247BED2DE545144D779A15E47643CDECAB9FE08EE8756E6777D5DC569B63207309DAF71269200DA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IXY.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VXY.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VXY..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:38:21 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.995971488681137
Encrypted:	false
SSDEEP:	48:83dZT4gHc+ZidAKZdA1p4ehDiZUkwqehCy+R:8jE/+15Ey
MD5:	40B49D78F942EB2B73A91F7D51D6E58B
SHA1:	D20CA54D2572FFC58B40DFE0AFE56169954F1290
SHA-256:	C88E98FBE8A9511950098FE47D050E0BF5B04706EB631D504AB9FB5C901EBB2E
SHA-512:	8D850690D6AC0BD932FB0A19BB61B4C4E4DDC9F2F91EFA5499E3AC595C0E2E03AABAB6B53C2BB3CD6D5937F9AB126B7ECE772AA15722B5D712A87F4EB6506BB0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......ne&....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IXY.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VXY.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VXY..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VXY............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:38:21 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985034250003119
Encrypted:	false
SSDEEP:	48:8BSdZT4gHc+ZidAKZdA1X4ehBiZUk1W1qehoy+C:8qE/+Lb9Iy
MD5:	ABDC49F99C7D8AE7B24BA003BE9CCC80
SHA1:	0D3C4474DF2E6D5860942B8F3EEF0503F6FBF6E6
SHA-256:	1B9AD04E24A003BFE61FBE5903CB70B38727F52F55C4B9D86E55E511B957D787
SHA-512:	4FF93FA2082957D5E60487F7DBBD4D72FCF8E9179762E3AF3A0EA4A148360AC1B1C4A14007E30E93231D84391A5B1AB6CAB3BE6967CEE197F05911120F98DEC8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......+ne&....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IXY.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VXY.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VXY..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VXY............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 21:38:21 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9918132870852623
Encrypted:	false
SSDEEP:	48:8DdZT4gHc+ZidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbay+yT+:8nE/+ETcJTbxWOvTbay7T
MD5:	DBC366C0493856C734DFDF27F779020C
SHA1:	25FE0A3A64FDFC633122522547761AEDAF446BB8
SHA-256:	57F460E73312633062613BD829F79FCEA9E5A014B58A4EB6C2F88811C23D65A1
SHA-512:	583CDC3A2AA1D7EFDC25E1335D49FD270E51BC6D529296330144E3DDCDE7CDF61C5211C048F066A9FF2D50A24997135F95423EE1C99B40AC68323CE7554233E2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\7.ne&....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.IXY.....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.VXY.....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.VXY..............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VXY............................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............0z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.372966377227965
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7CX9/VO4ggXAjp:6v/lhPfZM+7O4ggXAjp
MD5:	C791E19FDE8325467FA82B06B1BED80B
SHA1:	FB07588FACC39F549684DE6F1DD782308089EFEA
SHA-256:	89E344FDB98002D91C819A31ABA52D61893604CB816EBEA0C3426B5001B9D0F4
SHA-512:	449CE6033E4544DB69BBB6117A6F0E0B22C6EA26ED1F2E8AD8E8B0474ECCE037EB454A80334973701940CD0B1EEE9EB6B052E9E9678AF351C161A48A33C14332
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................gAMA......a.....IDAT..c`...............IEND.B`.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.372966377227965
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7CX9/VO4ggXAjp:6v/lhPfZM+7O4ggXAjp
MD5:	C791E19FDE8325467FA82B06B1BED80B
SHA1:	FB07588FACC39F549684DE6F1DD782308089EFEA
SHA-256:	89E344FDB98002D91C819A31ABA52D61893604CB816EBEA0C3426B5001B9D0F4
SHA-512:	449CE6033E4544DB69BBB6117A6F0E0B22C6EA26ED1F2E8AD8E8B0474ECCE037EB454A80334973701940CD0B1EEE9EB6B052E9E9678AF351C161A48A33C14332
Malicious:	false
Reputation:	low
URL:	https://banner.au-1.mimecastcybergraph.com/tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png
Preview:	.PNG........IHDR....................gAMA......a.....IDAT..c`...............IEND.B`.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.372966377227965
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7CX9/VO4ggXAjp:6v/lhPfZM+7O4ggXAjp
MD5:	C791E19FDE8325467FA82B06B1BED80B
SHA1:	FB07588FACC39F549684DE6F1DD782308089EFEA
SHA-256:	89E344FDB98002D91C819A31ABA52D61893604CB816EBEA0C3426B5001B9D0F4
SHA-512:	449CE6033E4544DB69BBB6117A6F0E0B22C6EA26ED1F2E8AD8E8B0474ECCE037EB454A80334973701940CD0B1EEE9EB6B052E9E9678AF351C161A48A33C14332
Malicious:	false
Reputation:	low
URL:	https://banner.au-1.mimecastcybergraph.com/favicon.ico
Preview:	.PNG........IHDR....................gAMA......a.....IDAT..c`...............IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 00:38:10.442285061 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 25, 2024 00:38:10.468626976 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:10.468653917 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:10.468733072 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:10.469008923 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:10.469022036 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.223078012 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.223340988 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.237266064 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.237297058 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.237699032 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.249152899 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.295341015 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.461488008 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.461518049 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.461534977 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.461639881 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.461648941 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.461704969 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.501302004 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.501327038 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.501463890 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.501488924 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.501543045 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.581130028 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.581161976 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.581269026 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.581279993 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.581326008 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.619462967 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.619492054 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.619584084 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.619594097 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.619643927 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.622311115 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.622338057 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.622421026 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.622426987 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.622469902 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.666558981 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.666666031 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.666729927 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.666804075 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.700781107 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.700805902 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.700903893 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.700918913 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.700974941 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.737812996 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.737839937 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.737951994 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.737961054 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.738008022 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.739149094 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:11.739166021 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:11.740482092 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.740505934 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.740580082 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.740586996 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.740645885 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.743237019 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.743259907 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.743339062 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.743344069 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.743438959 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.745352983 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.745383024 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.745451927 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.745457888 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.745506048 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.748090029 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.748120070 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.748172998 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.748178005 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.748202085 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.748230934 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.785454988 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.785487890 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.785670996 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.785677910 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.785741091 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.818363905 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.818454981 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.818486929 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.818547010 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.823090076 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.823103905 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.823117018 CEST	49706	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.823122025 CEST	443	49706	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.872730017 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.872764111 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.872776031 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.872875929 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.872889042 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.872952938 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.873234987 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.873251915 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.873332977 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.873369932 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.874846935 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.874871969 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.874932051 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.875030994 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.875046015 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.875782013 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.875793934 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.875844002 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.876296997 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.876305103 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.876357079 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.876461029 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.876472950 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.876496077 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:11.876507044 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:11.973573923 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:12.597086906 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.597743034 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.597759962 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.598244905 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.598249912 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.623408079 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.623450041 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.624183893 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.624216080 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.624253988 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.624264002 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.624528885 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.624535084 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.624588966 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.624593973 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.630238056 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.630619049 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.630635977 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.630779982 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.631043911 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.631050110 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.631115913 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.631136894 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.631685972 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.631692886 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.734175920 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.734196901 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.734307051 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.734327078 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.734349966 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.734380007 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.734416962 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.734707117 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.734724045 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.734743118 CEST	49710	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.734749079 CEST	443	49710	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.737983942 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.738008022 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.738106012 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.738307953 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.738321066 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.754858971 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.754883051 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.754935026 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.754972935 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755016088 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755302906 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755325079 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.755342007 CEST	49709	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755347967 CEST	443	49709	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.755487919 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.755551100 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.755625963 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755707979 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755707979 CEST	49711	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.755713940 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.755722046 CEST	443	49711	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.758187056 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.758229017 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.758261919 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.758281946 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.758369923 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.758372068 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.758481979 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.758495092 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.758559942 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.758582115 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.763653040 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.763694048 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.763775110 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.763788939 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.763802052 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.763839006 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.763880014 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.764059067 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.764070988 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.764080048 CEST	49707	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.764084101 CEST	443	49707	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.764630079 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.764687061 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.764735937 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.764877081 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.764888048 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.764905930 CEST	49708	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.764909983 CEST	443	49708	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.766925097 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.766942978 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.767031908 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.767152071 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.767170906 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.767182112 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.767188072 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:12.767247915 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.767395973 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:12.767411947 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.483951092 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.484535933 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.484559059 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.485012054 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.485018015 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.501635075 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.502058983 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.502091885 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.502464056 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.502470970 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.504870892 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.505127907 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.505140066 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.505467892 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.505475044 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.513447046 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.513729095 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.513746023 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.513775110 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.514029980 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.514046907 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.514050961 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.514056921 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.514528036 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.514533043 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.619894028 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.620095968 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.620208979 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.620268106 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.620286942 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.620297909 CEST	49713	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.620304108 CEST	443	49713	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.623229027 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.623265982 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.623354912 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.623554945 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.623558998 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.635056019 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.635335922 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.635421991 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.635462046 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.635462046 CEST	49712	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.635483980 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.635493994 CEST	443	49712	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.636478901 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.636718035 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.636770964 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.636811972 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.636811972 CEST	49714	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.636818886 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.636826992 CEST	443	49714	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.638171911 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.638222933 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.638320923 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.638422012 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.638437033 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.638823032 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.638834953 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.638895988 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.639020920 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.639034033 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.646908998 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.647058010 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.647130013 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.647145987 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.647152901 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.647164106 CEST	49716	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.647182941 CEST	443	49716	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.649197102 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.649230957 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.649322033 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.649445057 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.649460077 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.657530069 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.657588005 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.657649040 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.657737017 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.657752037 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.657762051 CEST	49715	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.657767057 CEST	443	49715	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.659710884 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.659744978 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:13.659841061 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.659936905 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:13.659955978 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.349673033 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.350286007 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.350317001 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.350759983 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.350764990 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.390733004 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.391191006 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.391207933 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.391268015 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.391644001 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.391647100 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.391649961 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.392056942 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.392074108 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.392472029 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.392477036 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.393261909 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.393261909 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.393285990 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.393304110 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.394262075 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.394534111 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.394546032 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.394927025 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.394932985 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.479132891 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.479361057 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.479437113 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.479665041 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.479681969 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.479716063 CEST	49717	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.479722023 CEST	443	49717	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.483712912 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.483741045 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.483865976 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.484170914 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.484180927 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.519892931 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.520025015 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.520155907 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.520237923 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.520237923 CEST	49720	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.520248890 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.520252943 CEST	443	49720	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.523792028 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.523829937 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.523955107 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.524168015 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.524182081 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.524338961 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.524488926 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.524609089 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.524676085 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.524676085 CEST	49718	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.524686098 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.524693966 CEST	443	49718	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.524755001 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.525207996 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.525235891 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.525317907 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.525342941 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.525361061 CEST	49721	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.525369883 CEST	443	49721	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.525372028 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.526185989 CEST	49719	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.526191950 CEST	443	49719	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.528803110 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.528829098 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.528948069 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.529078960 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.529090881 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.529484034 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.529506922 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.529592991 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.529745102 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.529752970 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.529800892 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.529814959 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:14.529894114 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.530066967 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:14.530078888 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.229787111 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.244910955 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.244939089 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.245352030 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.245357990 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.254740000 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 25, 2024 00:38:15.257265091 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.258018017 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.258028030 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.259253979 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.259258986 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.262301922 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.262854099 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.262862921 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.263669968 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.263674974 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.269593000 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.269972086 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.269983053 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.278393984 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.332961082 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.340992928 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.341016054 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.342793941 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.342802048 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.345045090 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.345052958 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.372199059 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.372262001 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.372380018 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.372512102 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.372525930 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.372543097 CEST	49722	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.372549057 CEST	443	49722	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.376266003 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.376313925 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.376599073 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.376667976 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.376677036 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.387605906 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.387729883 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.387803078 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.387862921 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.387873888 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.387885094 CEST	49724	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.387890100 CEST	443	49724	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.390892982 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.390933037 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.391258955 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.391258955 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.391295910 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.392596960 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.392685890 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.392757893 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.392838001 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.392838001 CEST	49726	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.392843962 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.392867088 CEST	443	49726	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.395231009 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.395250082 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.395503044 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.395612001 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.395623922 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.468573093 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.468637943 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.468729019 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.468961954 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.468961954 CEST	49725	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.468978882 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.468988895 CEST	443	49725	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.472135067 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.472158909 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.472434998 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.472661018 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.472673893 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.473648071 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.473737955 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.473792076 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.473962069 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.473962069 CEST	49723	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.473982096 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.473992109 CEST	443	49723	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.476120949 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.476150036 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:15.476296902 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.476562023 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:15.476571083 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.115303993 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.118289948 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.127744913 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.160984993 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.162384987 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.176604033 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.203663111 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.216607094 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.254841089 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.273324013 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.457895994 CEST	49673	443	192.168.2.9	204.79.197.203
Oct 25, 2024 00:38:16.586285114 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.586308956 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.587219954 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.587228060 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.587554932 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.587567091 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.589435101 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.589442015 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.590801001 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.590830088 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.594139099 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.594150066 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.611421108 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.611449957 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.612226963 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.612234116 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.613168955 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.613185883 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.613955021 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.613959074 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.712908030 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.712989092 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.713069916 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.713640928 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.714019060 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.714061975 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.720407963 CEST	49731	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.720424891 CEST	443	49731	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.723596096 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.723653078 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.723701000 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.724061966 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.724070072 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.724082947 CEST	49729	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.724090099 CEST	443	49729	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.725776911 CEST	49727	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.725796938 CEST	443	49727	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.730408907 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.730444908 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.730519056 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.731754065 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.731815100 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.731880903 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.734834909 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.734834909 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.734853029 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.734873056 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.734968901 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.735050917 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.735064983 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.735199928 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.735213995 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.743630886 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.743745089 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.743788004 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.744225979 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.744225979 CEST	49728	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.744237900 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.744241953 CEST	443	49728	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.751935005 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.751950026 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.752022982 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.752163887 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.752175093 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.882045031 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.882122040 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.882257938 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.882360935 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.882370949 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.882383108 CEST	49730	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.882388115 CEST	443	49730	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.886068106 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.886091948 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:16.886179924 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.886404991 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:16.886418104 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.462824106 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.468823910 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.468960047 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.473553896 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.504818916 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.520387888 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.521399975 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.521399975 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.625720978 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.676637888 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.797723055 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.797732115 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.798132896 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.798139095 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.798333883 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.798357010 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.798758984 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.798765898 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.798882961 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.798896074 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.799253941 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.799257994 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.799396038 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.799416065 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.799722910 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.799737930 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.799909115 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.799943924 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.800249100 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.800254107 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.924752951 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.924916029 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.925028086 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.925575972 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.925765038 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.925811052 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.925918102 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.926259041 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.926305056 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.926624060 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.927613974 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.927675962 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:17.932362080 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.932491064 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:17.932579041 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.522594929 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.522617102 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.522627115 CEST	49735	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.522633076 CEST	443	49735	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.524396896 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.524410009 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.524421930 CEST	49732	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.524429083 CEST	443	49732	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.536616087 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.536616087 CEST	49733	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.536627054 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.536633015 CEST	443	49733	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.538029909 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.538029909 CEST	49734	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.538043022 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.538048029 CEST	443	49734	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.538355112 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.538355112 CEST	49736	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.538391113 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.538404942 CEST	443	49736	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.543972969 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.544003010 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.544056892 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.549674988 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.549686909 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.553940058 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.553967953 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.554032087 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.554393053 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.554404974 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.554729939 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.554742098 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.554792881 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.558492899 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.558552027 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.558605909 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.560584068 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.560594082 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.560657024 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.560997963 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.561000109 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.561017036 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.561022043 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:18.561213017 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:18.561222076 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.287152052 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.288130045 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.294574976 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.298116922 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.305196047 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.320460081 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.320487022 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.320986986 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.320993900 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.321305990 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.321329117 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.321705103 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.321710110 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.322041988 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.322067022 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.322145939 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.322159052 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.322416067 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.322422028 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.322838068 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.322843075 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.323117971 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.323132038 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.323493004 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.323498964 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.448487997 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.448504925 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.448580980 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.448632956 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.448882103 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.448930025 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.448962927 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.449187994 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.449234962 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.450191021 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.450359106 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.450402021 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.452327013 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.452379942 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.452434063 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.904252052 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.904267073 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.904292107 CEST	49737	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.904298067 CEST	443	49737	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.905085087 CEST	49738	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.905093908 CEST	443	49738	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.905762911 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.905787945 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.905802011 CEST	49740	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.905808926 CEST	443	49740	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.906342983 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.906374931 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.906385899 CEST	49741	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.906393051 CEST	443	49741	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.906594992 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.906604052 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:19.906613111 CEST	49739	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:19.906618118 CEST	443	49739	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.359487057 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.359532118 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.359608889 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.361164093 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.361197948 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.361289024 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.361715078 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.361740112 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.361799955 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.361887932 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.361906052 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.363641024 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.363667011 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.363754988 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.363950014 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.363965988 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.364347935 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.364366055 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.364470959 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.364506960 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.365230083 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.365259886 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:20.365403891 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.365654945 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:20.365665913 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.105643034 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.106211901 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.106251955 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.106686115 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.106765032 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.106777906 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.107073069 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.107111931 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.107454062 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.107460022 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.112147093 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.112497091 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.112534046 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.112867117 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.112876892 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.114711046 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.115168095 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.115185976 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.115649939 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.115653992 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.117743015 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.118068933 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.118104935 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.118455887 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.118463039 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.235044003 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.235378027 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.235537052 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.235583067 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.235583067 CEST	49746	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.235605001 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.235615015 CEST	443	49746	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.236994982 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.239440918 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.239487886 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.239553928 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.239677906 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.239694118 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.241576910 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.241630077 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.241785049 CEST	49745	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.241797924 CEST	443	49745	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.242964029 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.243038893 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.243079901 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.243379116 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.243391037 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.243405104 CEST	49747	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.243411064 CEST	443	49747	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.245160103 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.245193005 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.245296955 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.245376110 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.245388985 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.245409012 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.245420933 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.245460033 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.245624065 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.245635986 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.246404886 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.246478081 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.246519089 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.246618032 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.246628046 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.246656895 CEST	49749	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.246663094 CEST	443	49749	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.249151945 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.249164104 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.249341965 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.249402046 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.249407053 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.249651909 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.249845982 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.249902010 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.249936104 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.249952078 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.249972105 CEST	49748	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.249978065 CEST	443	49748	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.252104044 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.252134085 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.252275944 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.252361059 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.252387047 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.383400917 CEST	49675	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:21.383407116 CEST	49676	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:21.616008043 CEST	49674	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:21.797532082 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:21.797588110 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:21.797802925 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:21.797996998 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:21.798053980 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:21.798259020 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:21.798305035 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:21.798322916 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:21.798470020 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:21.798485041 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:21.977782965 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.980875969 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.980896950 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.981389046 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.981395006 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.986254930 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.986557961 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.986565113 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.986907959 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.986912966 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.988616943 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.988890886 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.988914013 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.989365101 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.989371061 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.997193098 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.999335051 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.999349117 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:21.999785900 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:21.999790907 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.015275002 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.015665054 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.015681028 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.016098022 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.016103029 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.109234095 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.109517097 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.109610081 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.109692097 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.109705925 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.109719038 CEST	49754	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.109724998 CEST	443	49754	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.112519026 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.112529993 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.112672091 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.112806082 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.112831116 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.121345043 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.121408939 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.121481895 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.121665955 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.121680975 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.121694088 CEST	49752	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.121700048 CEST	443	49752	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.122950077 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.123109102 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.123219967 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.123219967 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.123265028 CEST	49756	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.123282909 CEST	443	49756	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.124811888 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.124845982 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.124993086 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.125103951 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.125137091 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.125827074 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.125876904 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.125956059 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.126118898 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.126137018 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.131810904 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.132271051 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.132380009 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.132380962 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.132416010 CEST	49755	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.132432938 CEST	443	49755	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.134716034 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.134737968 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.134808064 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.134954929 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.134969950 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.154795885 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.154932976 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.155030966 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.155155897 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.155155897 CEST	49753	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.155174971 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.155184031 CEST	443	49753	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.157887936 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.157937050 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.158009052 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.158176899 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.158194065 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.870960951 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.871700048 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.871717930 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.872200966 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.872205973 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.873028994 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.873351097 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.873374939 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.873704910 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.873711109 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.884401083 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.884809017 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.884820938 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.885170937 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.885175943 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.892169952 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.892508030 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.892523050 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:22.892832041 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:22.892837048 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.007993937 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.008224964 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.008244991 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.008311987 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.008467913 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.008517981 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.012650967 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.012666941 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.012690067 CEST	49761	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.012696981 CEST	443	49761	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.013772964 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.013781071 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.013802052 CEST	49762	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.013806105 CEST	443	49762	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.016547918 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.016577005 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.016624928 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.016643047 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.016669989 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.016721964 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.016777992 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.016793013 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.016864061 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.016885042 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.021642923 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.021883965 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.021955013 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.021975040 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.021982908 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.021996021 CEST	49760	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.022000074 CEST	443	49760	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.024933100 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.024976015 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.025053024 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.025168896 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.025185108 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.026170969 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.026544094 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.026597977 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.026668072 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.026683092 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.026694059 CEST	49763	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.026700974 CEST	443	49763	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.028714895 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.028749943 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.028853893 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.028973103 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.028985023 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.076977015 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.077353954 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.077373981 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.078454018 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.078516006 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.080266953 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.080333948 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.080816984 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.080823898 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.093715906 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.094043970 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.094054937 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.095098972 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.095175982 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.095824957 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.095889091 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.133104086 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.148674011 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.148685932 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.197516918 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.408256054 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.408329964 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.408375978 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.498975992 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:23.499159098 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:23.512439013 CEST	49758	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:38:23.512451887 CEST	443	49758	3.106.27.59	192.168.2.9
Oct 25, 2024 00:38:23.578840017 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:23.578876019 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:23.578972101 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:23.579154015 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:23.579164028 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:23.753804922 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.754331112 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.754364967 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.754518986 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.754791021 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.754796982 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.755007982 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.755029917 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.755513906 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.755523920 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.762939930 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.763470888 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.763489962 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.763953924 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.763958931 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.771135092 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.771497965 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.771519899 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.771964073 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.771970034 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.886643887 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.886872053 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.886926889 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.887173891 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.887195110 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.887221098 CEST	49766	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.887228966 CEST	443	49766	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.890252113 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.890290022 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.890403986 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.890542030 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.890554905 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.897732973 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.898220062 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.898272991 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.898308039 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.898308039 CEST	49767	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.898327112 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.898333073 CEST	443	49767	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.902185917 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.902213097 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.902399063 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.902522087 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.902534962 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.902889967 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.903038025 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.903137922 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.903137922 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.903137922 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.906011105 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.906050920 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.906171083 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.906260967 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.906276941 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.911616087 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.911798000 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.911864042 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.911901951 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.911901951 CEST	49769	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.911916971 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.911928892 CEST	443	49769	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.914561987 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.914601088 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.914697886 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.915035009 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.915051937 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.942114115 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:23.942142963 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:23.942205906 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:23.942471981 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:23.942487955 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:23.959808111 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.960984945 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.961000919 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:23.961863041 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:23.961868048 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.091001034 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.091074944 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.091140985 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.091346025 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.091371059 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.091464996 CEST	49759	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.091473103 CEST	443	49759	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.094646931 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.094702005 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.094772100 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.094892979 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.094904900 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.212773085 CEST	49768	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.212801933 CEST	443	49768	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.419446945 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:24.419858932 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:24.419876099 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:24.420911074 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:24.421029091 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:24.421967983 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:24.422044039 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:24.422470093 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:24.422478914 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:24.462372065 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:24.627635002 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.628206968 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.628226995 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.628679991 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.628684998 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.647597075 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.648117065 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.648132086 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.648540974 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.648546934 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.650856018 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.651309013 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.651330948 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.651833057 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.651849031 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.701590061 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.704216003 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.704258919 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.704644918 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.704651117 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.761082888 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.761148930 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.761269093 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.762661934 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.762686968 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.762769938 CEST	49771	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.762778044 CEST	443	49771	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.766638041 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.766674042 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.766746044 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.767163992 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.767185926 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.778520107 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.778959990 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.779050112 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.779050112 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.779103041 CEST	49774	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.779112101 CEST	443	49774	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.781893969 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.781938076 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.782067060 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.782428026 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.782444000 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.783766031 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.783833981 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.783955097 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.784240007 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.784240007 CEST	49773	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.784255981 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.784265995 CEST	443	49773	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.786140919 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.786179066 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.786262989 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.786397934 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.786412954 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.831459045 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:24.831823111 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:24.831841946 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:24.832892895 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:24.832969904 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:24.834019899 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:24.834089994 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:24.841029882 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.841564894 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.841584921 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.842506886 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.842513084 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.858237028 CEST	49677	443	192.168.2.9	20.189.173.11
Oct 25, 2024 00:38:24.862381935 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.862457037 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.862714052 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.862714052 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.862714052 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.865732908 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.865772009 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.865880966 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.866060019 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.866069078 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.889127016 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:24.889153004 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:24.935018063 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:24.973781109 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.973866940 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.974163055 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.974163055 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.974205971 CEST	49776	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.974227905 CEST	443	49776	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.977281094 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.977310896 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:24.977421999 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.977771044 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:24.977791071 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.065538883 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:25.065582991 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:25.065679073 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:25.067254066 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:25.067276955 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:25.166690111 CEST	49772	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.166707039 CEST	443	49772	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.543097973 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.543560982 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.543591022 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.544154882 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.544159889 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.552570105 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.553241968 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.553280115 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.554234028 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.554249048 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.623719931 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.624267101 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.624289989 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.624897003 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.624907017 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.643486023 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.644026995 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.644057989 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.644598007 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.644604921 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.678026915 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.678169966 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.678241968 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.678508997 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.678508997 CEST	49778	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.678524017 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.678531885 CEST	443	49778	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.687664986 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.687812090 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.687891006 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.692759991 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.692792892 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.692801952 CEST	49779	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.692809105 CEST	443	49779	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.709445000 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.709481001 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.709631920 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.710748911 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.710777044 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.710833073 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.711250067 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.711266994 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.711764097 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.711770058 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.712333918 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.712372065 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.712538004 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.712682962 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.712697983 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.756110907 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.756196022 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.756275892 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.756537914 CEST	49780	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.756546974 CEST	443	49780	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.760875940 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.760899067 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.761010885 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.761302948 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.761317015 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.775722027 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.776210070 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.776282072 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.776335001 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.776354074 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.776369095 CEST	49777	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.776376009 CEST	443	49777	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.778752089 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.778791904 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.778884888 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.779040098 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.779058933 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.846479893 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.846919060 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.847183943 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.847218037 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.847234011 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.847290993 CEST	49781	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.847297907 CEST	443	49781	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.850070953 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.850109100 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.850428104 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.850460052 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:25.850465059 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:25.911951065 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:25.912018061 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:25.916511059 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:25.916534901 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:25.916842937 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:25.960283995 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.007327080 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.202579975 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.202649117 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.202789068 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.202826023 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.202840090 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.202840090 CEST	49782	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.202851057 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.202857018 CEST	443	49782	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.259327888 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.259368896 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.259685040 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.260504007 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:26.260529041 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:26.448297977 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.449162006 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.449177980 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.449703932 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.449707985 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.499634981 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.500361919 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.500376940 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.500705004 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.500710964 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.521210909 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.521667004 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.521693945 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.522114038 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.522119045 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.577769041 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.577986956 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.578114033 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.578150034 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.578150034 CEST	49783	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.578171968 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.578181028 CEST	443	49783	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.580857038 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.580904007 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.581051111 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.581198931 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.581214905 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.584475994 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.584897995 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.584916115 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.585460901 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.585467100 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.630953074 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.631026983 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.631092072 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.631341934 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.631395102 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.631407976 CEST	49785	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.631413937 CEST	443	49785	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.634656906 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.634670973 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.635011911 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.635667086 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.635678053 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.654375076 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.654443979 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.654592037 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.654683113 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.654696941 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.654706955 CEST	49786	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.654711962 CEST	443	49786	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.657177925 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.657212973 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.657296896 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.657493114 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.657502890 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.713116884 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.713203907 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.713360071 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.713427067 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.713448048 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.713460922 CEST	49787	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.713466883 CEST	443	49787	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.716259956 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.716300964 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.716377974 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.716569901 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.716579914 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.757447004 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:26.757577896 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:26.757674932 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:26.763168097 CEST	49770	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:26.763191938 CEST	443	49770	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:26.805135965 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:26.805197954 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:26.805270910 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:26.805579901 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:26.805593014 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:26.818473101 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.818950891 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.818983078 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.819838047 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.819843054 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.950860977 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.950952053 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.951092005 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.951164961 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.951178074 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.951191902 CEST	49784	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.951200008 CEST	443	49784	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.953931093 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.953953028 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:26.954091072 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.954288006 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:26.954297066 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.132831097 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.132920980 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:27.134391069 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:27.134413958 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.134706974 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.135955095 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:27.179333925 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.320167065 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.320950031 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.320971012 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.321531057 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.321536064 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.386740923 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.387494087 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.387516975 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.388288021 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.388292074 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.391602039 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.391735077 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.391827106 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:27.392729044 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:27.392729044 CEST	49788	443	192.168.2.9	184.28.90.27
Oct 25, 2024 00:38:27.392745018 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.392756939 CEST	443	49788	184.28.90.27	192.168.2.9
Oct 25, 2024 00:38:27.404782057 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.405278921 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.405312061 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.414856911 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.414880991 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.449445009 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.449953079 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.449985981 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.450503111 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.450509071 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.457828045 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.458070993 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.458128929 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.458194971 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.458209038 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.458220005 CEST	49789	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.458225965 CEST	443	49789	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.462569952 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.462596893 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.462704897 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.462846994 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.462852001 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.521111012 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.521286011 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.521395922 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.521635056 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.521652937 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.521666050 CEST	49791	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.521675110 CEST	443	49791	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.524291992 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.524337053 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.524482965 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.524929047 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.524952888 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.550124884 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.550436020 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.550501108 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.550582886 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.550602913 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.550616026 CEST	49790	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.550621033 CEST	443	49790	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.553150892 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.553195000 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.553261995 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.553419113 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.553427935 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.585349083 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.585441113 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.585496902 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.585772038 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.585788012 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.585799932 CEST	49792	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.585805893 CEST	443	49792	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.590106964 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.590161085 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.590307951 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.590543032 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:27.590563059 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:27.648818016 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:27.649463892 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:27.649493933 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:27.649871111 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:27.650310993 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:27.650379896 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:27.650634050 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:27.691337109 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:28.209022045 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.209569931 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.209594011 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.210138083 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.210144043 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.288682938 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.289259911 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.289295912 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.289717913 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.289726973 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.291678905 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.292151928 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.292181015 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.292524099 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.292530060 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.325689077 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.326211929 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.326235056 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.326756954 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.326761961 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.342072010 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.343401909 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.343476057 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.343503952 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.343513012 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.343523026 CEST	49795	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.343528986 CEST	443	49795	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.346407890 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.346441031 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.346508026 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.346653938 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.346662998 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.418423891 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.418517113 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.418638945 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.418715954 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.418740034 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.418752909 CEST	49797	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.418759108 CEST	443	49797	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.421703100 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.421740055 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.421823025 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.422046900 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.422064066 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.427963018 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.427992105 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.428054094 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.428081989 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.428226948 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.428250074 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.428270102 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.428287029 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.428287029 CEST	49796	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.428294897 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.428302050 CEST	443	49796	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.431673050 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.431716919 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.431781054 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.431962967 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.431973934 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.456015110 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.456101894 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.456264973 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.456449032 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.456471920 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.456484079 CEST	49798	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.456490993 CEST	443	49798	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.460719109 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.460758924 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.460911989 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.461222887 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.461240053 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.752813101 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.753386021 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.753403902 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.753926039 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.753931046 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.882117987 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.882180929 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.882262945 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.882575035 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.882575035 CEST	49794	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.882591963 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.882601023 CEST	443	49794	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.885600090 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.885647058 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:28.885735989 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.885982990 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:28.885996103 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.082218885 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.087521076 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.087543011 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.091722965 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.091742992 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.148542881 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.159584045 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.165468931 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.165489912 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.166277885 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.166282892 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.166954041 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.166974068 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.167604923 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.167608976 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.179917097 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:29.180013895 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:29.180063009 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:29.183042049 CEST	49793	443	192.168.2.9	18.245.46.89
Oct 25, 2024 00:38:29.183047056 CEST	443	49793	18.245.46.89	192.168.2.9
Oct 25, 2024 00:38:29.212317944 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:29.212356091 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:29.212605000 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:29.213079929 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:29.213090897 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:29.217519045 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.217535973 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.217597961 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.217607021 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.217761993 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.217822075 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.218033075 CEST	49799	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.218044996 CEST	443	49799	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.222703934 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.222740889 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.223066092 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.223357916 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.223370075 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.235207081 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.236082077 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.236095905 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.236906052 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.236913919 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298093081 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298115969 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298167944 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298201084 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.298286915 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.298346043 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298371077 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298419952 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.298429966 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298461914 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.298461914 CEST	49801	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.298480034 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.298480988 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298499107 CEST	443	49801	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298612118 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298660994 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.298701048 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.300090075 CEST	49800	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.300112963 CEST	443	49800	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.305563927 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.305596113 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.305742025 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.307132959 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.307167053 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.307241917 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.307378054 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.307395935 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.307537079 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.307555914 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.373150110 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.373318911 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.373456001 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.373780012 CEST	49802	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.373794079 CEST	443	49802	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.377495050 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.377523899 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.377667904 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.378113031 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.378128052 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.630424976 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.631689072 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.631695032 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.632715940 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.632724047 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.765044928 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.765120983 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.765194893 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.765630960 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.765659094 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.765675068 CEST	49803	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.765681982 CEST	443	49803	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.771181107 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.771214962 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.771481037 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.771841049 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.771863937 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.950175047 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.950716019 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.950741053 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:29.951267958 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:29.951275110 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.036603928 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.037126064 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.037166119 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.037570000 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.037642956 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.037659883 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.037966967 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.037976027 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.038495064 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.038500071 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.065157890 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:30.065479040 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:30.065501928 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:30.066575050 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:30.066637993 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:30.067018032 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:30.067078114 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:30.067173004 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:30.067182064 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:30.081674099 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.081753969 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.081820965 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.082104921 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.082104921 CEST	49805	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.082138062 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.082149029 CEST	443	49805	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.085505009 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.085547924 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.085617065 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.085808039 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.085820913 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.116411924 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:30.126151085 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.127008915 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.127042055 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.127463102 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.127470016 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.170028925 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.170044899 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.170526981 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.170615911 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.170703888 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.170703888 CEST	49807	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.170727015 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.170738935 CEST	443	49807	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.171624899 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.171783924 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.172617912 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.172617912 CEST	49806	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.172638893 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.172648907 CEST	443	49806	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.177539110 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.177572966 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.177634954 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.178765059 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.178805113 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.178986073 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.188935041 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.188961029 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.189090014 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.189116955 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.261099100 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.261169910 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.261217117 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.486249924 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.486277103 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.486291885 CEST	49808	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.486299038 CEST	443	49808	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.506618023 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.553941965 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.573555946 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.573576927 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.581274986 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.581279993 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.659276962 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.659308910 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.659593105 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.683588028 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.683604956 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.708035946 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.708121061 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.708175898 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.708394051 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.708409071 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.708422899 CEST	49809	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.708432913 CEST	443	49809	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.714804888 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.714878082 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.715029001 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.715446949 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.715459108 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.831975937 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.832570076 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.832602978 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.833206892 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.833211899 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.922214985 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.923023939 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.923039913 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.924016953 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.924022913 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.925160885 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.925744057 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.925779104 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.926301003 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.926307917 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.967689991 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.968169928 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.968235016 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.968364954 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.968381882 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.968394041 CEST	49810	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.968400955 CEST	443	49810	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.972666979 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.972702980 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:30.972826004 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.973261118 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:30.973277092 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.054012060 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.054106951 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.054177046 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.054498911 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.054500103 CEST	49812	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.054519892 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.054532051 CEST	443	49812	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.060595036 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.060627937 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.060898066 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.061095953 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.061105967 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.062278986 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.062339067 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.062470913 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.062683105 CEST	49811	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.062689066 CEST	443	49811	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.065685034 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.065702915 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.065818071 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.065948009 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.065963030 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.420315981 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.420953035 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.420962095 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.421897888 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.421902895 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.449410915 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.450167894 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.450187922 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.451137066 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.451150894 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.553261995 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.553297997 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.553349972 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.553417921 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.553419113 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.564883947 CEST	49813	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.564908028 CEST	443	49813	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.573242903 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.573276997 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.573353052 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.573579073 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.573595047 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.585622072 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.585866928 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.585964918 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.585964918 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.585964918 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.588282108 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.588310957 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.588398933 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.588567972 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.588576078 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.712968111 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.713730097 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.713743925 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.714248896 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.714256048 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.802426100 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.802947998 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.802964926 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.803473949 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.803479910 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.857156038 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.857196093 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.857244968 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.857255936 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.857316971 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.858869076 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.858869076 CEST	49815	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.858884096 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.858892918 CEST	443	49815	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.863945007 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.866142988 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.866169930 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.866277933 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.866770029 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.866786957 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.867428064 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.867434978 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.868045092 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.868058920 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.899477005 CEST	49814	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.899492979 CEST	443	49814	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.931890965 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.932476997 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.932547092 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.932717085 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.932729006 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.932738066 CEST	49816	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.932743073 CEST	443	49816	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.935839891 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.935849905 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.935921907 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.936116934 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.936130047 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.997184992 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:31.997209072 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:31.997277975 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:31.998575926 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:31.998590946 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:31.999257088 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.999429941 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.999528885 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.999562025 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.999562025 CEST	49817	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:31.999581099 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:31.999588966 CEST	443	49817	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.002023935 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.002032995 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.002140045 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.002289057 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.002300978 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.301492929 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.302023888 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.302037954 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.302493095 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.302499056 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.344326973 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.344918013 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.344933987 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.345415115 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.345421076 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.433039904 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.433182955 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.433267117 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.433384895 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.433384895 CEST	49818	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.433406115 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.433419943 CEST	443	49818	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.436055899 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.436101913 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.436357021 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.436491966 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.436511040 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.478250027 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.478324890 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.478388071 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.478396893 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.478461981 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.478550911 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.478638887 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.478652000 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.478662968 CEST	49819	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.478668928 CEST	443	49819	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.481308937 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.481343031 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.481487989 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.481837988 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.481849909 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.582987070 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:32.583230019 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:32.583290100 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:32.584022045 CEST	49804	443	192.168.2.9	18.244.164.80
Oct 25, 2024 00:38:32.584037066 CEST	443	49804	18.244.164.80	192.168.2.9
Oct 25, 2024 00:38:32.601336002 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.601778030 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.601804972 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.602212906 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.602219105 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.661966085 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.662358999 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.662373066 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.662792921 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.662797928 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.747893095 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.748476982 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.748497963 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.749061108 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.749069929 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.758112907 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.758377075 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.758471012 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.758503914 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.758503914 CEST	49820	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.758516073 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.758524895 CEST	443	49820	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.761418104 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.761456966 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.761661053 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.761801004 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.761814117 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.794914961 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.795021057 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.795084953 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.795114994 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:32.795185089 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:32.795335054 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.795347929 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.795362949 CEST	49821	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.795368910 CEST	443	49821	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.796910048 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:32.796916008 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:32.797183037 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:32.798460960 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.798492908 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.798917055 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.799145937 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.799158096 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.836878061 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:32.851552963 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:32.878145933 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.878262997 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.878407955 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.878520966 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.878536940 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.878551960 CEST	49823	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.878556967 CEST	443	49823	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.881339073 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.881375074 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.881489992 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.881587982 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:32.881602049 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:32.895339012 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.112409115 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.112430096 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.112437963 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.112505913 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:33.112531900 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.112601995 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:33.113195896 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.113255978 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:33.113264084 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.113914013 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.113955975 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:33.184413910 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.222208023 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.226280928 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.231288910 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.231302023 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.232353926 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.232361078 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.270582914 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.278348923 CEST	49822	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:38:33.278366089 CEST	443	49822	20.109.210.53	192.168.2.9
Oct 25, 2024 00:38:33.282421112 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.282444954 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.283111095 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.283117056 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.409450054 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.409526110 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.409612894 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.423084021 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.423108101 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.423120022 CEST	49826	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.423125982 CEST	443	49826	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.429718971 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.429757118 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.429848909 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.430681944 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.430696964 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.451061010 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.451339960 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.451390982 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.451409101 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.451443911 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.461864948 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.461884022 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.461913109 CEST	49825	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.461919069 CEST	443	49825	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.475337982 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.475377083 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.475486040 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.476962090 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.476979017 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.483212948 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.483778000 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.483795881 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.484498978 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.484504938 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.543817043 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.547976017 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.547990084 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.548671961 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.548687935 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.615421057 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.617748022 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.617778063 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.617830992 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.617855072 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.617892027 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.630439997 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.630454063 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.631129026 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.631134033 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.631405115 CEST	49827	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.631412029 CEST	443	49827	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.650069952 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.650109053 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.650230885 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.650484085 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.650496960 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.680006981 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.680083036 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.680458069 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.682452917 CEST	49828	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.682473898 CEST	443	49828	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.732680082 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.732722998 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.732793093 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.733865976 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.733886003 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.842447042 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.842561960 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.842638969 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.843867064 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.843867064 CEST	49829	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.843874931 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.843894005 CEST	443	49829	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.852890968 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.852931976 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:33.853018999 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.853446960 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:33.853461027 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.177059889 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.177537918 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.177551985 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.177988052 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.178002119 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.229767084 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.230276108 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.230294943 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.230736017 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.230743885 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.311032057 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:34.311523914 CEST	49835	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:34.311570883 CEST	443	49835	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:34.311708927 CEST	49704	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:34.311747074 CEST	49835	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:34.312007904 CEST	49835	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:34.312026024 CEST	443	49835	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:34.312360048 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.312433958 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.312575102 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.312832117 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.312832117 CEST	49830	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.312848091 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.312856913 CEST	443	49830	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.315541029 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.315568924 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.315628052 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.315865040 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.315875053 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.316750050 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:34.317069054 CEST	443	49704	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:34.363148928 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.363181114 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.363229036 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.363259077 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.363297939 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.363564968 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.363583088 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.363603115 CEST	49831	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.363609076 CEST	443	49831	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.366693020 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.366738081 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.366827011 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.367171049 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.367182970 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.388053894 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.388641119 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.388659954 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.389111996 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.389132023 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.467673063 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.468744040 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.468760014 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.469434977 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.469439983 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.520111084 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.520174026 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.520248890 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.520478010 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.520494938 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.520524979 CEST	49832	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.520531893 CEST	443	49832	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.523865938 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.523902893 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.523967028 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.524112940 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.524126053 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.602235079 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.602320910 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.602404118 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.604254007 CEST	49833	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.604262114 CEST	443	49833	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.607620001 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.607645988 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.607742071 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.608007908 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.608025074 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.638551950 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.640191078 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.640213966 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.641647100 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.641653061 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.776652098 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.776721001 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.776875973 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.777054071 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.777054071 CEST	49834	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.777065039 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.777075052 CEST	443	49834	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.779897928 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.779934883 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.779995918 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.780167103 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:34.780177116 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:34.873260975 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:34.873318911 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:34.873471975 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:34.993685007 CEST	443	49835	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:34.993756056 CEST	49835	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:35.055325985 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.055883884 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.055915117 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.056416035 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.056425095 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.102472067 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.103032112 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.103055954 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.103493929 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.103502035 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.185693026 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.185726881 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.185776949 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.185800076 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.185837984 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.186073065 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.186091900 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.186110973 CEST	49836	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.186119080 CEST	443	49836	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.189371109 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.189409018 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.189495087 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.189697027 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.189712048 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.234582901 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.234642982 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.234853029 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.234910011 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.234929085 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.234937906 CEST	49837	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.234944105 CEST	443	49837	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.237972021 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.238010883 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.238225937 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.238455057 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.238476038 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.256148100 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.256738901 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.256762981 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.257273912 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.257278919 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.342334986 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.344228029 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.344243050 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.345093012 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.345098972 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.391239882 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.391417027 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.391494989 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.391647100 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.391695976 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.391757965 CEST	49838	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.391776085 CEST	443	49838	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.394687891 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.394718885 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.394881964 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.394998074 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.395008087 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.478806019 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.478882074 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.479068995 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.479130030 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.479146004 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.479156017 CEST	49839	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.479161978 CEST	443	49839	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.482228994 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.482255936 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.482326984 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.482521057 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.482536077 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.548856020 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.549365044 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.549391031 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.549856901 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.549868107 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.684715986 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.684977055 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.685024023 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.685029030 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.685069084 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.685159922 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.685170889 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.685182095 CEST	49840	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.685187101 CEST	443	49840	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.688041925 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.688107967 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.688210011 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.688337088 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.688369989 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.919816017 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.920346022 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.920357943 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:35.920891047 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:35.920895100 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.010248899 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.016392946 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.016415119 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.016937017 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.016944885 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.050245047 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.050313950 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.050522089 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.050708055 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.050708055 CEST	49841	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.050729036 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.050738096 CEST	443	49841	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.053430080 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.053457975 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.053622961 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.053807020 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.053817987 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.139298916 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.139910936 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.139929056 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.140398026 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.140403986 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.150245905 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.150623083 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.150850058 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.150989056 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.151012897 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.151077986 CEST	49842	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.151084900 CEST	443	49842	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.154340029 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.154391050 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.154474974 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.154630899 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.154639959 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.220186949 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.220717907 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.220741987 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.221266985 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.221275091 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.276849031 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.277117968 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.277178049 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.277304888 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.277304888 CEST	49843	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.277331114 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.277342081 CEST	443	49843	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.280282974 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.280325890 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.280505896 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.280687094 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.280703068 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.350565910 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.350980997 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.351028919 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.351048946 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.351104975 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.351162910 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.351181984 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.351192951 CEST	49844	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.351200104 CEST	443	49844	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.353823900 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.353857994 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.354073048 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.354329109 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.354341984 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.420336008 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.420865059 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.420881987 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.421322107 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.421328068 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.552668095 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.552736044 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.552804947 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.553071022 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.553087950 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.553123951 CEST	49845	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.553129911 CEST	443	49845	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.556322098 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.556350946 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.556428909 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.556587934 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.556597948 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.603281975 CEST	49775	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:38:36.603327990 CEST	443	49775	142.250.185.164	192.168.2.9
Oct 25, 2024 00:38:36.789140940 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.790249109 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.790278912 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.791378975 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.791397095 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.893120050 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.893682003 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.893718004 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.894140005 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.894148111 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.919759035 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.919790983 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.919836998 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.919856071 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.919902086 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.920188904 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.920203924 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.920217991 CEST	49846	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.920223951 CEST	443	49846	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.923324108 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.923367977 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:36.923429966 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.923583031 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:36.923593998 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.012113094 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.012662888 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.012689114 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.013217926 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.013228893 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.023942947 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.024019003 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.024096012 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.024306059 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.024332047 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.024334908 CEST	49847	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.024344921 CEST	443	49847	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.026896000 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.026922941 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.027250051 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.027400970 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.027412891 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.099395037 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.099950075 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.099994898 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.100430965 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.100440979 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.142352104 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.142381907 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.142432928 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.142441034 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.142488956 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.142819881 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.142837048 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.142880917 CEST	49848	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.142888069 CEST	443	49848	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.146007061 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.146075964 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.146194935 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.146373987 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.146388054 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.231671095 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.231904984 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.231973886 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.232230902 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.232254982 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.232271910 CEST	49849	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.232279062 CEST	443	49849	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.236043930 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.236097097 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.236227036 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.236373901 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.236402988 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.290262938 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.290816069 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.290836096 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.291332960 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.291341066 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.420918941 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.420989990 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.421037912 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.421084881 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.421133041 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.421307087 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.421319962 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.421329975 CEST	49850	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.421335936 CEST	443	49850	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.424073935 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.424139977 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.424220085 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.424412966 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.424424887 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.660550117 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.661053896 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.661070108 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.661515951 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.661523104 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.749965906 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.751898050 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.751913071 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.752551079 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.752556086 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.835578918 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.835654020 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.835877895 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.836024046 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.836024046 CEST	49851	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.836040020 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.836050987 CEST	443	49851	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.838802099 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.838857889 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.838964939 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.839270115 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.839289904 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.883760929 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.883788109 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.883831024 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.883888006 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.883888006 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.884114027 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.884125948 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.884150028 CEST	49852	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.884155035 CEST	443	49852	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.885780096 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.886477947 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.886501074 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.887120962 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.887129068 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.887212992 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.887231112 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:37.887332916 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.889919043 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:37.889930964 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.016972065 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.017024994 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.017175913 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.017312050 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.017312050 CEST	49853	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.017318964 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.017323017 CEST	443	49853	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.017872095 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.018290043 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.018306971 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.018785954 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.018795967 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.020181894 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.020204067 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.020427942 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.020503998 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.020510912 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.158077955 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.158561945 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.158581018 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.159074068 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.159089088 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.188283920 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.188366890 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.188420057 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.188610077 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.188630104 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.188640118 CEST	49854	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.188648939 CEST	443	49854	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.191900969 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.191929102 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.192001104 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.192179918 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.192207098 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.295209885 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.295288086 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.295469999 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.295646906 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.295646906 CEST	49855	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.295660019 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.295670986 CEST	443	49855	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.298672915 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.298717976 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.298784018 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.298955917 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.298969984 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.588143110 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.588711023 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.588742018 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.589200974 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.589207888 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.658307076 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.658873081 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.658884048 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.659317017 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.659323931 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.720572948 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.720602036 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.720649004 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.720679998 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.720772982 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.720989943 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.721028090 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.721040964 CEST	49856	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.721050024 CEST	443	49856	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.723988056 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.724031925 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.724092007 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.724268913 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.724283934 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.790725946 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.791337013 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.791349888 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.791790009 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.791812897 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.794773102 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.794836998 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.794912100 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.795033932 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.795053959 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.795063972 CEST	49857	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.795069933 CEST	443	49857	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.797949076 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.797991037 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.798065901 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.798224926 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.798235893 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.923624992 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.924182892 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.924205065 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.924654007 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.924662113 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.929053068 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.929085970 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.929135084 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.929160118 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.929254055 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.929519892 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.929519892 CEST	49858	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.929543972 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.929557085 CEST	443	49858	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.932513952 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.932559013 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:38.932631969 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.932809114 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:38.932822943 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.032854080 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.033440113 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.033468008 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.033914089 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.033919096 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.055799961 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.055866003 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.055955887 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.056148052 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.056148052 CEST	49859	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.056164026 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.056171894 CEST	443	49859	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.059134960 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.059178114 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.059410095 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.059567928 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.059576035 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.163147926 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.163239002 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.163368940 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.163476944 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.163558006 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.163572073 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.163582087 CEST	49860	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.163588047 CEST	443	49860	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.166548967 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.166585922 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.166656971 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.166835070 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.166846991 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.468838930 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.469417095 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.469451904 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.469886065 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.469894886 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.571681023 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.572194099 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.572206020 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.572649956 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.572655916 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.599581957 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.599752903 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.599883080 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.599926949 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.599942923 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.599972010 CEST	49861	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.599977970 CEST	443	49861	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.602786064 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.602826118 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.603043079 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.603259087 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.603270054 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.708925009 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.708990097 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.709096909 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.709162951 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.709337950 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.709353924 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.709363937 CEST	49862	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.709371090 CEST	443	49862	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.712191105 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.712248087 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.712486982 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.712666035 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.712680101 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.794179916 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.794642925 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.794667006 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.795303106 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.795325994 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.904236078 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.904746056 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.904773951 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.905215025 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.905222893 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.927051067 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.927428007 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.927489996 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.927519083 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.927575111 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.927632093 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.927650928 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.927664042 CEST	49864	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.927669048 CEST	443	49864	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.930671930 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.930710077 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:39.930788040 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.931039095 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:39.931051016 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.038845062 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.039082050 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.039304972 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.039357901 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.039372921 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.039383888 CEST	49865	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.039388895 CEST	443	49865	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.042282104 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.042305946 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.042413950 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.042613029 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.042620897 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.327828884 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.328360081 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.328370094 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.328824043 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.328828096 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.452672005 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.453135967 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.453154087 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.453568935 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.453574896 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.458899021 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.458961010 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.459137917 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.459216118 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.459228039 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.459237099 CEST	49866	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.459242105 CEST	443	49866	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.462382078 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.462410927 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.462549925 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.462645054 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.462656975 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.586215973 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.586433887 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.586483955 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.586540937 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.586550951 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.586560011 CEST	49867	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.586565018 CEST	443	49867	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.589601994 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.589629889 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.589698076 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.589906931 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.589917898 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.673151016 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.673718929 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.673732042 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.674156904 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.674161911 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.775127888 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.775615931 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.775626898 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.776098967 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.776103973 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.808936119 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.809026003 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.809087992 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.809214115 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.809242964 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.809257984 CEST	49868	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.809267998 CEST	443	49868	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.811995029 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.812047005 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.812225103 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.812278986 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.812290907 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.829878092 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.830543995 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.830554008 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.831115961 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.831120968 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.909754038 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.910068989 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.910137892 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.910176992 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.910190105 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.910203934 CEST	49869	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.910208941 CEST	443	49869	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.912916899 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.912938118 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.913152933 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.913336039 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.913346052 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.965095043 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.965363979 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.965421915 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.965451956 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.965461969 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.965473890 CEST	49863	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.965478897 CEST	443	49863	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.968446970 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.968497992 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:40.968600035 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.968746901 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:40.968763113 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.198446989 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.198966026 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.198981047 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.199496984 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.199501991 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.329416990 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.329595089 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.329664946 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.329794884 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.329796076 CEST	49870	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.329814911 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.329827070 CEST	443	49870	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.332806110 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.332879066 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.332967043 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.333149910 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.333174944 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.334527016 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.334959030 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.334981918 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.335374117 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.335381031 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.466675997 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.466764927 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.466820955 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.467001915 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.467019081 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.467036963 CEST	49871	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.467051029 CEST	443	49871	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.469917059 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.469930887 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.469995022 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.470153093 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.470160961 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.590436935 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.590943098 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.590965986 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.591425896 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.591430902 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.649621964 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.650144100 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.650187016 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.650583029 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.650599957 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.721220016 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.721780062 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.721798897 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.722242117 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.722246885 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.729739904 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.729764938 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.729810953 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.729827881 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.729882002 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.730103016 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.730120897 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.730133057 CEST	49872	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.730139017 CEST	443	49872	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.733083963 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.733117104 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.733201981 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.733335018 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.733346939 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.780795097 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.780874014 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.781068087 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.781120062 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.781121016 CEST	49873	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.781150103 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.781173944 CEST	443	49873	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.783824921 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.783862114 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.783966064 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.784132957 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.784143925 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.852673054 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.852844000 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.852986097 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.853163958 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.853183031 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.853233099 CEST	49874	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.853240013 CEST	443	49874	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.860596895 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.860627890 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:41.860810041 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.860996008 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:41.861006975 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.078167915 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.078674078 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.078689098 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.079229116 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.079233885 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.195734978 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.196157932 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.196192026 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.196712017 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.196718931 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.209506035 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.209574938 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.209774971 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.209820032 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.209836006 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.209846973 CEST	49875	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.209853888 CEST	443	49875	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.212960958 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.213009119 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.213071108 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.213236094 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.213252068 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.326221943 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.326260090 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.326317072 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.326344013 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.326466084 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.326509953 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.326740026 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.326750994 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.326766014 CEST	49876	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.326773882 CEST	443	49876	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.329375029 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.329405069 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.329513073 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.329637051 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.329648972 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.502119064 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.502635956 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.502645016 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.503122091 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.503127098 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.547801971 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.548434019 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.548449039 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.548954964 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.548959017 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.593393087 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.593875885 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.593887091 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.594333887 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.594337940 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.640358925 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.640413046 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.640470982 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.640547037 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.640866995 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.640887022 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.640902042 CEST	49877	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.640912056 CEST	443	49877	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.644808054 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.644870043 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.644944906 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.645147085 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.645158052 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.684353113 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.684447050 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.684489012 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.684499979 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.684551001 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.684705973 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.684711933 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.684727907 CEST	49878	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.684735060 CEST	443	49878	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.687586069 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.687619925 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.687686920 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.687844992 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.687859058 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.723155022 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.723247051 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.723447084 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.723494053 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.723494053 CEST	49879	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.723512888 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.723522902 CEST	443	49879	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.726663113 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.726717949 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:42.726799011 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.726950884 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:42.726967096 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.092201948 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.092777014 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.092802048 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.093238115 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.093244076 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.124013901 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.124413013 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.124420881 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.124941111 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.124944925 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.277913094 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.277946949 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.277985096 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.278004885 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.278048992 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.278067112 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.278073072 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.278103113 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.278316021 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.278338909 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.278340101 CEST	49881	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.278352022 CEST	49880	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.278358936 CEST	443	49880	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.278359890 CEST	443	49881	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.281336069 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.281358004 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.281436920 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.281470060 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.281482935 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.281541109 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.281671047 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.281672955 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.281685114 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.281688929 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.387749910 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.388293982 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.388309002 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.388845921 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.388853073 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.458710909 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.458992004 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.459203959 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.459242105 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.459604025 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.459614038 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.459954977 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.459961891 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.460031033 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.460037947 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.520494938 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.520513058 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.520570993 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.520574093 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.520632029 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.520874977 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.520893097 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.520919085 CEST	49882	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.520925045 CEST	443	49882	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.523916006 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.523938894 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.524015903 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.524139881 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.524147034 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.592066050 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.592094898 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.592143059 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.592222929 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.592458963 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.592479944 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.592490911 CEST	49884	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.592498064 CEST	443	49884	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.595462084 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.595516920 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.595603943 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.595772028 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.595786095 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.649785995 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.649836063 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.649885893 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.649960995 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.650309086 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.650326967 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.650361061 CEST	49883	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.650367022 CEST	443	49883	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.655044079 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.655055046 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:43.655220985 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.655529022 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:43.655535936 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.015784979 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.016382933 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.016416073 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.017117977 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.017124891 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.064271927 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.065037012 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.065063000 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.065793991 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.065802097 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.153058052 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.153270006 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.153407097 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.153692007 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.153707981 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.153717995 CEST	49886	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.153724909 CEST	443	49886	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.157404900 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.157433033 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.157495022 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.157934904 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.157952070 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.252896070 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.253721952 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.253739119 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.254409075 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.254414082 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.338918924 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.339824915 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.339853048 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.340514898 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.340526104 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.385086060 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.385180950 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.385375977 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.386020899 CEST	49887	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.386030912 CEST	443	49887	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.393260956 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.393299103 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.393450022 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.394016027 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.394026995 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.400819063 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.401560068 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.401575089 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.402379990 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.402384996 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.474544048 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.474606037 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.474723101 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.474771976 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.474817038 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.475080967 CEST	49888	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.475092888 CEST	443	49888	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.480173111 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.480205059 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.480268002 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.480658054 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.480670929 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.514844894 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.514967918 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.515125990 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.515470028 CEST	49885	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.515491962 CEST	443	49885	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.521549940 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.521586895 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.521687031 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.521907091 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.521920919 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.536247969 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.536309958 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.536510944 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.536773920 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.536773920 CEST	49889	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.536806107 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.536819935 CEST	443	49889	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.542057991 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.542108059 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.542356014 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.542538881 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.542551041 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.936578989 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.937310934 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.937325001 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:44.937860966 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:44.937868118 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.094479084 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.094554901 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.094671965 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.094743967 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.095154047 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.095171928 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.095197916 CEST	49890	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.095202923 CEST	443	49890	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.099478960 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.099503994 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.099694014 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.099809885 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.099817038 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.131606102 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.132345915 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.132360935 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.133213043 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.133218050 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.261183023 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.261666059 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.261682987 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.261692047 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.263372898 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.263380051 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.264244080 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.264254093 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.265830040 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.265835047 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.267049074 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.267112970 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.267184019 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.267576933 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.267599106 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.267631054 CEST	49891	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.267637968 CEST	443	49891	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.273066044 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.273087025 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.273188114 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.273340940 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.273355007 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.359524965 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.360316038 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.360325098 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.361277103 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.361280918 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.395950079 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.396051884 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.396156073 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.396641016 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.396641016 CEST	49893	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.396660089 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.396671057 CEST	443	49893	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.400562048 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.400602102 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.400652885 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.400671005 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.400711060 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.401345015 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.401360035 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.401370049 CEST	49892	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.401376009 CEST	443	49892	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.405313969 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.405345917 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.405415058 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.406259060 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.406291962 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.406555891 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.406722069 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.406733990 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.407077074 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.407094002 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.500858068 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.500937939 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.501127005 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.501388073 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.501401901 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.501437902 CEST	49894	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.501444101 CEST	443	49894	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.505136013 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.505167961 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.505263090 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.505701065 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.505712032 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.873966932 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.874581099 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.874593019 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:45.875432968 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:45.875438929 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.008022070 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.008095980 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.008191109 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.008311033 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.008311033 CEST	49895	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.008336067 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.008347034 CEST	443	49895	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.013313055 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.013364077 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.013447046 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.013991117 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.014009953 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.022226095 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.022856951 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.022874117 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.024348974 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.024357080 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.151237011 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.151772976 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.151793003 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.152110100 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.152127981 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.153584003 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.153667927 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.153749943 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.153949022 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.153949022 CEST	49896	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.153959990 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.153969049 CEST	443	49896	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.157252073 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.157283068 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.157346964 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.157491922 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.157505989 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.259294033 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.260232925 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.260252953 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.261127949 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.261132002 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.290337086 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.290405989 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.290463924 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.292496920 CEST	49897	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.292515993 CEST	443	49897	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.296538115 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.296570063 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.296721935 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.298430920 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.298445940 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.392736912 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.392811060 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.392949104 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.393177032 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.393177032 CEST	49899	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.393198967 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.393209934 CEST	443	49899	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.396171093 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.396210909 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.396282911 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.396455050 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.396466970 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.429527998 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.430095911 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.430114985 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.430577993 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.430598974 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.558104992 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.558135986 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.558190107 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.558214903 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.558315039 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.558415890 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.558415890 CEST	49898	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.558432102 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.558439970 CEST	443	49898	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.565196037 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.565234900 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.565318108 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.565830946 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.565844059 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.750631094 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.751529932 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.751560926 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.752461910 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.752470016 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.881548882 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.881581068 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.881643057 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.881644964 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.881699085 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.881844997 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.881864071 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.881876945 CEST	49900	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.881882906 CEST	443	49900	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.888323069 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.888391018 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.888549089 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.888962030 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.888988972 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.889250994 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.890105963 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.890116930 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:46.890971899 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:46.890975952 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.023046017 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.023124933 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.023367882 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.023977995 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.023996115 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.024032116 CEST	49901	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.024039030 CEST	443	49901	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.027622938 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.028749943 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.028763056 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.028966904 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.029316902 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.029354095 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.030109882 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.030117989 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.030514956 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.030525923 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.137991905 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.138597965 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.138616085 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.139368057 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.139374018 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.160204887 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.160234928 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.160285950 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.160288095 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.160332918 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.160763025 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.160783052 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.160797119 CEST	49902	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.160803080 CEST	443	49902	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.166770935 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.166800976 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.166867971 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.167290926 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.167304993 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.270119905 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.270215034 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.270556927 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.270556927 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.271136045 CEST	49903	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.271159887 CEST	443	49903	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.275263071 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.275306940 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.275443077 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.275655985 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.275672913 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.308285952 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.308901072 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.308921099 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.309715033 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.309721947 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.440989017 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.441054106 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.441107035 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.441174984 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.441543102 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.441543102 CEST	49904	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.441564083 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.441576958 CEST	443	49904	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.446809053 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.446861982 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.446964979 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.447259903 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.447277069 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.609266043 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.609879971 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.609899044 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.610532045 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.610537052 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.741591930 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.741667032 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.741760015 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.741940975 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.741940975 CEST	49905	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.741961002 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.741978884 CEST	443	49905	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.745013952 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.745052099 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.745218992 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.745279074 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.745286942 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.760957956 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.761396885 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.761408091 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.761885881 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.761903048 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.896281004 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.896310091 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.896373034 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.896373034 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.896565914 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.896692038 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.896692038 CEST	49906	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.896709919 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.896727085 CEST	443	49906	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.899544954 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.899586916 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.899703979 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.899756908 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.899941921 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.899956942 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.900232077 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.900252104 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:47.900685072 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:47.900691032 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.003726006 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.004308939 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.004331112 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.004777908 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.004786968 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.034053087 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.034087896 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.034147978 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.034169912 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.034214973 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.048752069 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.048777103 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.048789024 CEST	49907	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.048795938 CEST	443	49907	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.054569006 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.054605961 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.054703951 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.055224895 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.055233955 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.136555910 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.136583090 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.136635065 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.136672020 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.136702061 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.136835098 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.136835098 CEST	49908	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.136853933 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.136866093 CEST	443	49908	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.139539003 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.139585018 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.139669895 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.139807940 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.139822960 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.323883057 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.324403048 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.324438095 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.324839115 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.324845076 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.463694096 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.463800907 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.463867903 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.464015007 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.464032888 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.464046001 CEST	49909	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.464052916 CEST	443	49909	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.465495110 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.466206074 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.466240883 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.466480017 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.466485977 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.467236042 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.467262983 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.467327118 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.467474937 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.467487097 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.596976995 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.597090960 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.597137928 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.597158909 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.597229958 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.597352982 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.597373962 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.597382069 CEST	49910	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.597388983 CEST	443	49910	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.600054979 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.600097895 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.600263119 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.600428104 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.600444078 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.637793064 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.638370991 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.638397932 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.638828993 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.638834953 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.770414114 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.770512104 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.770570993 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.770731926 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.770731926 CEST	49911	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.770751953 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.770761013 CEST	443	49911	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.773830891 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.773869991 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.773935080 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.774120092 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.774132967 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.803402901 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.803946018 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.803962946 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.804409027 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.804414988 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.938222885 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.938306093 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.938344955 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.938394070 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.938713074 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.938721895 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.938733101 CEST	49912	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.938738108 CEST	443	49912	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.942186117 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.942217112 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.942295074 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.942553997 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.942564964 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.957345963 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.957720041 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.957737923 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:48.958256006 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:48.958261967 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.092700005 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.092953920 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.093038082 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.094404936 CEST	49913	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.094418049 CEST	443	49913	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.097877979 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.097908974 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.098035097 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.098228931 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.098237038 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.203386068 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.204165936 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.204190016 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.204755068 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.204761028 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.337848902 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.337876081 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.337932110 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.337991953 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.338176012 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.338193893 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.338205099 CEST	49914	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.338212013 CEST	443	49914	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.340879917 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.340919018 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.341000080 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.341183901 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.341200113 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.376832962 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.377336979 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.377358913 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.377788067 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.377794981 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.510234118 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.510757923 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.510778904 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.511265039 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.511270046 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.517378092 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.517458916 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.517530918 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.517666101 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.517687082 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.517697096 CEST	49915	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.517703056 CEST	443	49915	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.520597935 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.520637989 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.520754099 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.520853043 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.520860910 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.645601034 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.645675898 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.645736933 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.645765066 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.645787954 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.646073103 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.646073103 CEST	49916	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.646089077 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.646099091 CEST	443	49916	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.649267912 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.649306059 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.649364948 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.649553061 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.649564028 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.679239035 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.679747105 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.679775000 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.680227041 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.680238008 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.817163944 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.817230940 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.817285061 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.817538023 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.817553043 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.817568064 CEST	49917	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.817575932 CEST	443	49917	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.820674896 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.820720911 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.821057081 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.821264029 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.821279049 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.832441092 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.832890987 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.832901955 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.833367109 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.833372116 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.969186068 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.969258070 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.969486952 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.969579935 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.969579935 CEST	49918	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.969590902 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.969600916 CEST	443	49918	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.972665071 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.972697973 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:49.972788095 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.972914934 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:49.972925901 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.074974060 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.075581074 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.075592041 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.076085091 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.076090097 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.209500074 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.209542036 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.209590912 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.209605932 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.209661007 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.209892988 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.209904909 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.209928036 CEST	49919	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.209933996 CEST	443	49919	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.213525057 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.213573933 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.213649988 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.213871002 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.213886023 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.255806923 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.256366968 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.256383896 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.256809950 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.256814957 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.376657963 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.377198935 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.377217054 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.377691031 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.377701998 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.391212940 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.391290903 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.391411066 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.391575098 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.391583920 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.391612053 CEST	49920	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.391618013 CEST	443	49920	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.394248962 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.394288063 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.394443035 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.394586086 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.394602060 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.509130955 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.509411097 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.509495974 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.509519100 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.509529114 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.509579897 CEST	49921	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.509586096 CEST	443	49921	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.512455940 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.512486935 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.512794018 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.512975931 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.512989044 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.572403908 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.572861910 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.572877884 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.573406935 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.573414087 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.711220026 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.711476088 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.711513996 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.711579084 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.711631060 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.711631060 CEST	49922	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.711651087 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.711661100 CEST	443	49922	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.714477062 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.714505911 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.714639902 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.714809895 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.714828014 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.724239111 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.724659920 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.724673986 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.725276947 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.725291014 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.856355906 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.856443882 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.856590986 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.856698990 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.856698990 CEST	49923	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.856718063 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.856725931 CEST	443	49923	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.859549046 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.859576941 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.859652042 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.859780073 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.859787941 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.939112902 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.939634085 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.939645052 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:50.940181017 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:50.940185070 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.066936016 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.067050934 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.067102909 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.067162991 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.067226887 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.067236900 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.067245960 CEST	49924	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.067250013 CEST	443	49924	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.070095062 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.070108891 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.070178986 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.070405960 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.070417881 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.135421991 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.141884089 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.141897917 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.142748117 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.142754078 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.257215977 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.258315086 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.258328915 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.262192965 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.262200117 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.268986940 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.269126892 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.269186974 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.269476891 CEST	49925	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.269494057 CEST	443	49925	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.277034998 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.277060032 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.277262926 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.277761936 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.277772903 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.392337084 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.392436981 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.392623901 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.392947912 CEST	49926	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.392965078 CEST	443	49926	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.397628069 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.397665024 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.397747040 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.398036957 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.398051023 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.455048084 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.456043959 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.456057072 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.457259893 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.457267046 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.591773033 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.591797113 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.591834068 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.591888905 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.592106104 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.592113972 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.592123032 CEST	49927	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.592128038 CEST	443	49927	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.597539902 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.597556114 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.597641945 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.598004103 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.598016024 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.640549898 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.641532898 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.641550064 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.642880917 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.642887115 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.776143074 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.776416063 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.776474953 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.793111086 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.793126106 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.793162107 CEST	49928	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.793169022 CEST	443	49928	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.803967953 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.850985050 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.852432966 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.852441072 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.859113932 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.859157085 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.901510954 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.901546001 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.901679039 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.901995897 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.902005911 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.992957115 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.993082047 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.993139982 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.993477106 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.993490934 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.993499041 CEST	49929	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.993505001 CEST	443	49929	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.999125957 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.999175072 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:51.999264956 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.999624968 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:51.999650955 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.016366005 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.017246962 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.017270088 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.018038988 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.018044949 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.151544094 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.151737928 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.151798010 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.151861906 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.172183037 CEST	49930	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.172202110 CEST	443	49930	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.176767111 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.176791906 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.176897049 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.177345991 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.177356958 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.222098112 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.223722935 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.223754883 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.224922895 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.224932909 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.341571093 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.342161894 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.342189074 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.342684031 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.342691898 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.357858896 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.357930899 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.358052969 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.358160019 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.358181000 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.358191967 CEST	49931	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.358197927 CEST	443	49931	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.361116886 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.361150980 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.361212015 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.361370087 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.361385107 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.477751017 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.477776051 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.477814913 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.477885962 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.478457928 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.478457928 CEST	49932	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.478494883 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.478509903 CEST	443	49932	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.481355906 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.481388092 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.481647015 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.481791019 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.481797934 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.639166117 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.641113043 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.641120911 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.642777920 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.642785072 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.732044935 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.732768059 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.732793093 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.733464003 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.733480930 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.777951002 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.778064966 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.778137922 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.778553963 CEST	49933	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.778568983 CEST	443	49933	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.781903982 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.781953096 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.782043934 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.782180071 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.782203913 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.866002083 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.866136074 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.866210938 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.876121998 CEST	49934	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.876156092 CEST	443	49934	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.881043911 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.881078959 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.881285906 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.881690979 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.881702900 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.904973984 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.905599117 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.905615091 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:52.906447887 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:52.906451941 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.037513971 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.037590027 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.037878036 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.038450003 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.038450003 CEST	49935	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.038470030 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.038479090 CEST	443	49935	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.042407036 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.042438984 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.042570114 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.042865992 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.042886019 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.108243942 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.109168053 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.109205008 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.110424995 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.110430956 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.228105068 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.231169939 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.231185913 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.231925011 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.231934071 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.242005110 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.242055893 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.242101908 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.242117882 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.242364883 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.242698908 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.242713928 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.242881060 CEST	49936	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.242887020 CEST	443	49936	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.247239113 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.247288942 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.247462988 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.247689962 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.247705936 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.357948065 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.358010054 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.358078957 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.358505964 CEST	49937	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.358520985 CEST	443	49937	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.364998102 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.365034103 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.365194082 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.365566015 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.365607023 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.514470100 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.515469074 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.515477896 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.516571045 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.516576052 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.622827053 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.623538971 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.623550892 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.624439001 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.624443054 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.644040108 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.644082069 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.644130945 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.644186020 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.645000935 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.645018101 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.645030975 CEST	49938	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.645035982 CEST	443	49938	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.651608944 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.651632071 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.651846886 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.652050972 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.652059078 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.753102064 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.753171921 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.753400087 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.753459930 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.753460884 CEST	49939	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.753475904 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.753485918 CEST	443	49939	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.756602049 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.756644011 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.756731033 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.756958008 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.756972075 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.781836987 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.782396078 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.782407045 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.782896042 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.782911062 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.919644117 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.919680119 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.919739008 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.919785976 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.919821978 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.920108080 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.920142889 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.920155048 CEST	49940	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.920161963 CEST	443	49940	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.923295021 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.923337936 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.923445940 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.923666954 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.923676968 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.982332945 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.983129025 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.983153105 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:53.983839989 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:53.983849049 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.113814116 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.114375114 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.114391088 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.114850998 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.114876986 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.117573023 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.117670059 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.117752075 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.117835999 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.117835999 CEST	49941	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.117855072 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.117866039 CEST	443	49941	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.120795012 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.120830059 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.121197939 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.121380091 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.121395111 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.182518959 CEST	443	49835	23.206.229.209	192.168.2.9
Oct 25, 2024 00:38:54.182692051 CEST	49835	443	192.168.2.9	23.206.229.209
Oct 25, 2024 00:38:54.246819973 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.247848988 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.247956038 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.247992992 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.247992992 CEST	49942	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.248008013 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.248012066 CEST	443	49942	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.251893997 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.251944065 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.252027035 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.252418041 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.252429008 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.385730982 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.386953115 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.386965036 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.388165951 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.388178110 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.489089966 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.489968061 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.489984989 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.491334915 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.491344929 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.518934011 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.519033909 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.519134998 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.519560099 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.519575119 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.519618034 CEST	49943	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.519624949 CEST	443	49943	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.526262999 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.526309967 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.526453018 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.526571035 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.526583910 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.628557920 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.629410028 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.629487991 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.629553080 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.629553080 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.629877090 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.629877090 CEST	49944	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.629889965 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.629899025 CEST	443	49944	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.634161949 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.634207964 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.634289980 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.634787083 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.634799957 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.655927896 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.662942886 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.662955046 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.673099995 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.673120975 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.801388979 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.801465988 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.801554918 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.820558071 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.820558071 CEST	49945	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.820575953 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.820580959 CEST	443	49945	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.826296091 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.826333046 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.826472044 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.827424049 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.827440023 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.876738071 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.877592087 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.877614021 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.878640890 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:54.878648043 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:54.999522924 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.000241041 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.000252008 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.001068115 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.001075983 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.016175985 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.016252995 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.016402006 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.016835928 CEST	49946	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.016850948 CEST	443	49946	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.022367954 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.022412062 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.022561073 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.022762060 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.022775888 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.135971069 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.136149883 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.136415958 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.136579037 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.136579037 CEST	49947	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.136595964 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.136609077 CEST	443	49947	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.140712023 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.140758038 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.140836000 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.141145945 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.141174078 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.292191982 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.292651892 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.292661905 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.293309927 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.293315887 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.369081974 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.369600058 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.369622946 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.370084047 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.370090008 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.432945967 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.433043957 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.433130026 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.433368921 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.433382988 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.433408976 CEST	49948	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.433414936 CEST	443	49948	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.436537981 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.436579943 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.436656952 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.436857939 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.436867952 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.504189014 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.504259109 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.504314899 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.504563093 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.504579067 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.504585028 CEST	49949	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.504590034 CEST	443	49949	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.507637024 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.507688999 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.507787943 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.507967949 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.507985115 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.553706884 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.554305077 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.554332972 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.554795027 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.554800987 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.685069084 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.685148001 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.685220003 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.685493946 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.685493946 CEST	49950	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.685519934 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.685529947 CEST	443	49950	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.690125942 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.690167904 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.690274000 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.690669060 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.690684080 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.754915953 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.755846024 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.755870104 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.757379055 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.757385969 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.873219013 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.873752117 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.873778105 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.874222994 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.874228954 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.884229898 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.884305000 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.884360075 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.884635925 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.884653091 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.884665012 CEST	49951	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.884670973 CEST	443	49951	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.887731075 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.887762070 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:55.887857914 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.888005018 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:55.888016939 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.003736973 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.003758907 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.003807068 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.003830910 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.003880978 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.004144907 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.004159927 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.004169941 CEST	49952	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.004174948 CEST	443	49952	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.006947994 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.006978989 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.007047892 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.007206917 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.007225037 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.191653967 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.192248106 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.192281008 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.192723036 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.192728996 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.251352072 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.251869917 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.251894951 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.252329111 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.252336025 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.323189974 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.323287010 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.323472977 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.323529005 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.323537111 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.323549986 CEST	49953	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.323555946 CEST	443	49953	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.326566935 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.326601982 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.326761961 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.326944113 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.326958895 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.383368015 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.383383036 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.383430958 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.383444071 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.383475065 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.383528948 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.383714914 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.383728027 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.383753061 CEST	49954	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.383759022 CEST	443	49954	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.386401892 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.386490107 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.386637926 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.386852980 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.386871099 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.430244923 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.430783987 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.430800915 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.431225061 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.431235075 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.563878059 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.563967943 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.564174891 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.564333916 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.564354897 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.564383030 CEST	49955	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.564392090 CEST	443	49955	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.567127943 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.567163944 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.567322016 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.567718983 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.567737103 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.623651028 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.624165058 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.624175072 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.624681950 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.624686003 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.752711058 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.753273964 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.753295898 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.753830910 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.753840923 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.766532898 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.766565084 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.766617060 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.766635895 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.766711950 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.766937971 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.766942978 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.767009020 CEST	49956	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.767013073 CEST	443	49956	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.770004034 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.770061970 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.770190954 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.770395994 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.770412922 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.888051987 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.888122082 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.888183117 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.888394117 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.888394117 CEST	49957	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.888410091 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.888422012 CEST	443	49957	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.891210079 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.891244888 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:56.891336918 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.891525030 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:56.891536951 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.057923079 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.058464050 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.058474064 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.059005022 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.059010029 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.123003006 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.123573065 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.123584032 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.124036074 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.124042034 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.191508055 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.191585064 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.191670895 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.191922903 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.191922903 CEST	49958	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.191936970 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.191941977 CEST	443	49958	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.194953918 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.195002079 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.195120096 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.195341110 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.195362091 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.257857084 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.257929087 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.258008003 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.258266926 CEST	49959	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.258294106 CEST	443	49959	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.262311935 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.262346983 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.262422085 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.262680054 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.262692928 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.319689035 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.324239969 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.324305058 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.325038910 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.325045109 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.459696054 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.459763050 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.459814072 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.459898949 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.459898949 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.460119963 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.460134983 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.460154057 CEST	49960	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.460160971 CEST	443	49960	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.463257074 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.463296890 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.463399887 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.463589907 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.463603020 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.518707037 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.519335032 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.519346952 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.519753933 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.519762993 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.629467010 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.630027056 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.630040884 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.630431890 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.630448103 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.655047894 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.655570030 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.655642986 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.655719995 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.655730009 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.655752897 CEST	49961	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.655759096 CEST	443	49961	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.658927917 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.658967018 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.659049988 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.659209013 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.659223080 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.762365103 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.762545109 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.762640953 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.762727976 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.762746096 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.762840033 CEST	49962	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.762847900 CEST	443	49962	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.765599966 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.765629053 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.765722990 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.765985966 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.765999079 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.937808990 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.938433886 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.938450098 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.939160109 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.939167023 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.991934061 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.992610931 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.992638111 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:57.992979050 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:57.992985964 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.073158026 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.073177099 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.073276997 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.073312044 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.073445082 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.073544979 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.073559999 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.073630095 CEST	49963	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.073638916 CEST	443	49963	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.076550961 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.076577902 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.076802015 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.077018976 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.077030897 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.124603033 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.125006914 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.125066996 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.125117064 CEST	49964	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.125134945 CEST	443	49964	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.128168106 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.128202915 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.128312111 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.128449917 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.128458977 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.205528021 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.206089973 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.206113100 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.206528902 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.206537008 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.339451075 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.339474916 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.339533091 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.339561939 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.339590073 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.339834929 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.339854002 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.339867115 CEST	49965	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.339873075 CEST	443	49965	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.342803001 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.342833996 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.343015909 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.343112946 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.343120098 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.406946898 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.407562971 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.407587051 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.408000946 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.408006907 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.503810883 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.504343987 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.504364967 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.504780054 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.504789114 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.539958954 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.539990902 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.540051937 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.540102959 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.540302992 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.540311098 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.540350914 CEST	49966	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.540354967 CEST	443	49966	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.543524027 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.543553114 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.543703079 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.543977976 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.543989897 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.640578985 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.640600920 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.640654087 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.640688896 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.640721083 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.640906096 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.640919924 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.641077995 CEST	49967	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.641083956 CEST	443	49967	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.643845081 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.643881083 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.644013882 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.644227982 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.644237995 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.814390898 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.815078974 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.815093040 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.816422939 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.816441059 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.882035971 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.883280039 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.883296967 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.884179115 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.884182930 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.947981119 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.948010921 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.948080063 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.948137045 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.948781967 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.948781967 CEST	49968	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.948800087 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.948803902 CEST	443	49968	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.955650091 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.955703020 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:58.955807924 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.956254005 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:58.956269026 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.017086029 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.017160892 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.017239094 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.017667055 CEST	49969	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.017687082 CEST	443	49969	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.025356054 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.025410891 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.025588989 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.088005066 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.088834047 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.088849068 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.090509892 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.090519905 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.091919899 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.091943979 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.223299026 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.223408937 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.225483894 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.225483894 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.225483894 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.227969885 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.228010893 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.228113890 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.228463888 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.228480101 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.272016048 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.272640944 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.272655964 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.273920059 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.273925066 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.389812946 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.391902924 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.391926050 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.393033981 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.393048048 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.405042887 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.405108929 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.405167103 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.419087887 CEST	49971	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.419106007 CEST	443	49971	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.424834013 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.424877882 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.424988985 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.425309896 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.425324917 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.523792028 CEST	49970	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.523808002 CEST	443	49970	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.525823116 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.526050091 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.526114941 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.526299953 CEST	49972	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.526315928 CEST	443	49972	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.531663895 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.531698942 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.531759977 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.532030106 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.532047987 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.730937958 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.751794100 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.751811028 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.752846003 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.752855062 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.838862896 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.839327097 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.839358091 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.839874983 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.839881897 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.888603926 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.888627052 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.888690948 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.888710022 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.888748884 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.888886929 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.888947964 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.889000893 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.889024973 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.889024973 CEST	49973	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.889040947 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.889050007 CEST	443	49973	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.891886950 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.891921997 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.892200947 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.892391920 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.892405987 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.974591970 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.974632025 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.974684954 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.974700928 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.974745035 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.975012064 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.975025892 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.975042105 CEST	49974	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.975047112 CEST	443	49974	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.978167057 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.978204012 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.978281975 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.978465080 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.978481054 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.982836008 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.983308077 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.983330011 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:38:59.983767986 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:38:59.983772993 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.158219099 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.158775091 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.158793926 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.159233093 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.159239054 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.232827902 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.232851028 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.232923985 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.232933998 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.232956886 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.232992887 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.233027935 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.238414049 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.238487005 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.238487005 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.238537073 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.238612890 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.238631010 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.238641977 CEST	49975	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.238647938 CEST	443	49975	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.241596937 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.241647959 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.241739035 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.241997004 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.242012024 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.276221037 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.278024912 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.278052092 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.278841972 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.278847933 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.289314032 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.289341927 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.289392948 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.289444923 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.289444923 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.290323019 CEST	49976	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.290340900 CEST	443	49976	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.297239065 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.297276020 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.297512054 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.297667027 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.297682047 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.520972967 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.520998001 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.521013975 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.521066904 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.521090984 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.521120071 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.521143913 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.530030012 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.530072927 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.530121088 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.530133009 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.530150890 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.530150890 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.532725096 CEST	49977	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.532742023 CEST	443	49977	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.561937094 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.561975002 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.562133074 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.563163996 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.563174963 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.635977983 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.637330055 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.637356043 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.638843060 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.638849020 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.715143919 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.715897083 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.715919018 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.716860056 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.716866016 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.770220995 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.770241976 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.770318985 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.770338058 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.770414114 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.770653963 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.770658016 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.770665884 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.770667076 CEST	49978	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.770719051 CEST	443	49978	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.776041985 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.776072979 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.776304960 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.776531935 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.776540041 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.847569942 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.847593069 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.847666025 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.847680092 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.847711086 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.847762108 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.847946882 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.847958088 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.847963095 CEST	49979	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.847970963 CEST	443	49979	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.853101015 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.853147030 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.853267908 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.853718042 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.853732109 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.991625071 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.993207932 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.993221998 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:00.994077921 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:00.994095087 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.044383049 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.044951916 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.044970036 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.045789957 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.045799017 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.124433994 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.124527931 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.125972033 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.127490997 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.127504110 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.127516031 CEST	49980	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.127521038 CEST	443	49980	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.132303953 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.132323027 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.132409096 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.132674932 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.132683992 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.178499937 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.178838968 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.178889990 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.179090977 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.179104090 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.179116964 CEST	49981	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.179122925 CEST	443	49981	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.184890032 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.184915066 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.185092926 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.185256004 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.185265064 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.301321030 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.302759886 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.302773952 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.304059029 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.304064035 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.433089972 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.433135033 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.433209896 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.434454918 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.434472084 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.434483051 CEST	49982	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.434490919 CEST	443	49982	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.437987089 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.438014984 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.438137054 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.438277006 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.438287973 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.547282934 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.547801018 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.547817945 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.548289061 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.548297882 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.587088108 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.587629080 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.587661982 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.588135958 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.588141918 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.683150053 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.683226109 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.683299065 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.683567047 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.683567047 CEST	49983	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.683583021 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.683592081 CEST	443	49983	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.686611891 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.686640978 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.686774015 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.686919928 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.686932087 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.721559048 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.721590042 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.721633911 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.721698999 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.721863031 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.721880913 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.721991062 CEST	49984	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.721997976 CEST	443	49984	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.875662088 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.876566887 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.876581907 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.877275944 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.877284050 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.932056904 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.933182955 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.933201075 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:01.934133053 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:01.934144974 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.009180069 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.009260893 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.009372950 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.009644032 CEST	49985	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.009670973 CEST	443	49985	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.069535017 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.069613934 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.069761038 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.069925070 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.069925070 CEST	49986	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.069937944 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.069947004 CEST	443	49986	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.206366062 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.207123995 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.207138062 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.208058119 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.208065033 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.342230082 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.342339993 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.342531919 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.342642069 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.342642069 CEST	49987	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.342662096 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.342670918 CEST	443	49987	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.433408976 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.434201956 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.434215069 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.435369968 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.435375929 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.565763950 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.565896034 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:02.565948009 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.566185951 CEST	49988	443	192.168.2.9	13.107.246.45
Oct 25, 2024 00:39:02.566204071 CEST	443	49988	13.107.246.45	192.168.2.9
Oct 25, 2024 00:39:05.477343082 CEST	49705	80	192.168.2.9	93.184.221.240
Oct 25, 2024 00:39:05.484636068 CEST	80	49705	93.184.221.240	192.168.2.9
Oct 25, 2024 00:39:05.484755039 CEST	49705	80	192.168.2.9	93.184.221.240
Oct 25, 2024 00:39:08.148835897 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:39:08.148854017 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:39:09.627132893 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:09.627172947 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:09.627239943 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:09.627671003 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:09.627681971 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.448118925 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.448368073 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.451335907 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.451344967 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.451608896 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.453382015 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.499325037 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.726869106 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.726890087 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.726902962 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.727385044 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.727402925 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.727534056 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.729240894 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.729315042 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.729378939 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.729516029 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.730062008 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.730070114 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:10.730233908 CEST	49989	443	192.168.2.9	20.109.210.53
Oct 25, 2024 00:39:10.730238914 CEST	443	49989	20.109.210.53	192.168.2.9
Oct 25, 2024 00:39:22.664055109 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:39:22.664139032 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:39:22.664202929 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:39:23.980611086 CEST	49757	443	192.168.2.9	3.106.27.59
Oct 25, 2024 00:39:23.980639935 CEST	443	49757	3.106.27.59	192.168.2.9
Oct 25, 2024 00:39:23.981369019 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:23.981406927 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:23.981487036 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:23.982103109 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:23.982115984 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:24.833272934 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:24.833604097 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:24.833614111 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:24.833952904 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:24.834537983 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:24.834598064 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:24.883836985 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:34.836843967 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:34.836921930 CEST	443	49991	142.250.185.164	192.168.2.9
Oct 25, 2024 00:39:34.837099075 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:36.647320032 CEST	49991	443	192.168.2.9	142.250.185.164
Oct 25, 2024 00:39:36.647342920 CEST	443	49991	142.250.185.164	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 00:38:20.245178938 CEST	53	52492	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:20.245250940 CEST	53	49339	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:21.591211081 CEST	53	56395	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:21.774619102 CEST	62722	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:21.777812958 CEST	57313	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:21.793201923 CEST	53	62722	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:21.796766043 CEST	53	57313	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:23.552244902 CEST	58846	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:23.552403927 CEST	62574	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:23.571413994 CEST	53	58846	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:23.578437090 CEST	53	62574	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:23.933288097 CEST	49229	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:23.933438063 CEST	52991	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:23.941272974 CEST	53	52991	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:23.941302061 CEST	53	49229	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:29.192831039 CEST	57461	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:29.193464041 CEST	58040	53	192.168.2.9	1.1.1.1
Oct 25, 2024 00:38:29.211127043 CEST	53	58040	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:29.211436033 CEST	53	57461	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:38.579862118 CEST	53	58536	1.1.1.1	192.168.2.9
Oct 25, 2024 00:38:57.642504930 CEST	53	61098	1.1.1.1	192.168.2.9
Oct 25, 2024 00:39:05.343631983 CEST	138	138	192.168.2.9	192.168.2.255
Oct 25, 2024 00:39:19.723206997 CEST	53	60431	1.1.1.1	192.168.2.9
Oct 25, 2024 00:39:20.451282024 CEST	53	65388	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 00:38:21.774619102 CEST	192.168.2.9	1.1.1.1	0x6432	Standard query (0)	image-processing-service.au-1.mimecastcybergraph.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:21.777812958 CEST	192.168.2.9	1.1.1.1	0xd70d	Standard query (0)	image-processing-service.au-1.mimecastcybergraph.com	65	IN (0x0001)	false
Oct 25, 2024 00:38:23.552244902 CEST	192.168.2.9	1.1.1.1	0x861b	Standard query (0)	banner.au-1.mimecastcybergraph.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.552403927 CEST	192.168.2.9	1.1.1.1	0x9544	Standard query (0)	banner.au-1.mimecastcybergraph.com	65	IN (0x0001)	false
Oct 25, 2024 00:38:23.933288097 CEST	192.168.2.9	1.1.1.1	0x3242	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.933438063 CEST	192.168.2.9	1.1.1.1	0xa59c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 00:38:29.192831039 CEST	192.168.2.9	1.1.1.1	0xd832	Standard query (0)	banner.au-1.mimecastcybergraph.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:29.193464041 CEST	192.168.2.9	1.1.1.1	0xe09a	Standard query (0)	banner.au-1.mimecastcybergraph.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 00:38:10.468030930 CEST	1.1.1.1	192.168.2.9	0x3ba2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 00:38:10.468030930 CEST	1.1.1.1	192.168.2.9	0x3ba2	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:21.793201923 CEST	1.1.1.1	192.168.2.9	0x6432	No error (0)	image-processing-service.au-1.mimecastcybergraph.com		3.106.27.59	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:21.793201923 CEST	1.1.1.1	192.168.2.9	0x6432	No error (0)	image-processing-service.au-1.mimecastcybergraph.com		13.238.210.148	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:21.793201923 CEST	1.1.1.1	192.168.2.9	0x6432	No error (0)	image-processing-service.au-1.mimecastcybergraph.com		13.54.156.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.571413994 CEST	1.1.1.1	192.168.2.9	0x861b	No error (0)	banner.au-1.mimecastcybergraph.com		18.245.46.89	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.571413994 CEST	1.1.1.1	192.168.2.9	0x861b	No error (0)	banner.au-1.mimecastcybergraph.com		18.245.46.84	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.571413994 CEST	1.1.1.1	192.168.2.9	0x861b	No error (0)	banner.au-1.mimecastcybergraph.com		18.245.46.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.571413994 CEST	1.1.1.1	192.168.2.9	0x861b	No error (0)	banner.au-1.mimecastcybergraph.com		18.245.46.79	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:23.941272974 CEST	1.1.1.1	192.168.2.9	0xa59c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 00:38:23.941302061 CEST	1.1.1.1	192.168.2.9	0x3242	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:29.211436033 CEST	1.1.1.1	192.168.2.9	0xd832	No error (0)	banner.au-1.mimecastcybergraph.com		18.244.164.80	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:29.211436033 CEST	1.1.1.1	192.168.2.9	0xd832	No error (0)	banner.au-1.mimecastcybergraph.com		18.244.164.30	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:29.211436033 CEST	1.1.1.1	192.168.2.9	0xd832	No error (0)	banner.au-1.mimecastcybergraph.com		18.244.164.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 00:38:29.211436033 CEST	1.1.1.1	192.168.2.9	0xd832	No error (0)	banner.au-1.mimecastcybergraph.com		18.244.164.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

image-processing-service.au-1.mimecastcybergraph.com

banner.au-1.mimecastcybergraph.com

fs.microsoft.com

https:

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:11 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:11 UTC	561	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:11 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223811Z-16849878b78x6gn56mgecg60qc00000001bg00000000v23k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:11 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-24 22:38:11 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.9	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:12 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:12 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223812Z-16849878b78j5kdg3dndgqw0vg00000001d000000000960z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:12 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.9	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:12 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:12 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223812Z-16849878b78c5zx4gw8tcga1b40000000890000000007dnd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:12 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.9	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:12 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223812Z-r197bdfb6b49q4951yb663v3ds00000000t0000000001ss5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.9	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:12 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:12 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2f084f0e-501e-0029-2021-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223812Z-17c5cb586f6qkkscezt8hb00a000000001ug000000006169 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:12 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.9	49708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:12 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:12 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223812Z-15b8d89586fnsf5zd126eyaetw00000000v0000000008076 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:12 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.9	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:13 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223813Z-15b8d89586fst84k5f3z220tec0000000f5g00000000dmxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.9	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:13 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223813Z-16849878b787sbpl0sv29sm89s00000008cg00000000gn1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.9	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:13 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223813Z-16849878b78c2tmb7nhatnd68s000000089g00000000kw57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.9	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:13 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:13 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223813Z-16849878b78smng4k6nq15r6s4000000014000000000kz90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:13 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.9	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:13 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:13 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223813Z-16849878b78k8q5pxkgux3mbgg000000085g00000000w516 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:13 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.9	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:14 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223814Z-16849878b78jfqwd1dsrhqg3aw000000089g00000000w6r6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:14 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.9	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:14 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223814Z-15b8d89586f2hk28h0h6zye26c000000022g00000000byq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.9	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:14 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223814Z-16849878b78k8q5pxkgux3mbgg000000085g00000000w53n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.9	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:14 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223814Z-16849878b786wvrz321uz1cknn000000088g00000000qvcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.9	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:14 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e4cbed29-601e-0002-4328-26a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223814Z-17c5cb586f6w4xfwf11m3wvey000000001kg00000000879x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:14 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.9	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:15 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:15 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223815Z-r197bdfb6b429k2s6br3k49qn400000005rg00000000e4m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:15 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.9	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:15 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9b05f8c0-e01e-0020-40f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223815Z-15b8d89586fvk4kmbg8pf84y8800000000h0000000005c28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.9	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:15 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: f981d888-e01e-0099-4d18-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223815Z-r197bdfb6b4lbgfqwkqbrm672s000000023g00000000agwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.9	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:15 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:15 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223815Z-16849878b78z5q7jpbgf6e9mcw00000008dg00000000es0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:15 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.9	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:15 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223815Z-16849878b785dznd7xpawq9gcn0000000130000000007vb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.9	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:16 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:16 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223816Z-16849878b786lft2mu9uftf3y400000000wg00000000fgyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:16 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.9	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:16 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:16 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223816Z-r197bdfb6b42rt68rzg9338g1g00000000ug00000000745e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.9	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:16 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223816Z-16849878b78smng4k6nq15r6s4000000012000000000yzqr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.9	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:16 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223816Z-17c5cb586f677284pnx3kebuu400000001t00000000035kr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.9	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:16 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0fc246dd-801e-0035-4529-26752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223816Z-15b8d89586fst84k5f3z220tec0000000f800000000070qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.9	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:17 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a89f9527-e01e-0033-5af4-244695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223817Z-15b8d89586fqj7k5h9gbd8vs9800000000ug000000006z3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.9	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:17 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9b0fb70e-e01e-0020-42f5-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223817Z-r197bdfb6b4g24ztpxkw4umce8000000019g000000000uh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.9	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:17 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223817Z-16849878b787psctgubawhx7k8000000084g00000000ka8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.9	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:17 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:17 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ea438a18-a01e-0053-68ef-258603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223817Z-r197bdfb6b4hsj5bywyqk9r2xw000000010g000000009rb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:17 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.9	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:17 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223817Z-16849878b78p8hrf1se7fucxk800000000f0000000005kf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.9	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223819Z-16849878b78lhh9t0fb3392enw000000084g00000000vbym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.9	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:19 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 06960f57-101e-000b-0c20-265e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223819Z-17c5cb586f6tzc2wdxudxz0zw8000000016g000000007ssv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.9	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:19 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:19 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7f2251b-001e-0017-4fad-240c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223819Z-15b8d89586fvk4kmbg8pf84y8800000000dg0000000057m7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:19 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.9	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:19 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 63cccf2b-801e-0067-3256-26fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223819Z-17c5cb586f6qkkscezt8hb00a000000001x0000000000g1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.9	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:19 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223819Z-16849878b78p8hrf1se7fucxk800000000kg000000005dbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.9	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223821Z-17c5cb586f67hhlz1ecw6yxtp000000001w0000000007a3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.9	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:21 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223821Z-16849878b7898p5f6vryaqvp5800000000f0000000000kdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.9	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223821Z-16849878b78fmrkt2ukpvh9wh400000008d00000000002pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.9	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223821Z-17c5cb586f6mqlb7hyuq0z97g800000001y0000000007sc5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.9	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223821Z-16849878b786lft2mu9uftf3y400000000t0000000010q79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.9	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-16849878b78hz7zj8u0h2zng1400000008bg00000000mmhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:22 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.9	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b59cacea-101e-000b-76f2-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-15b8d89586fx2hlt035xdehq580000000fdg000000000vmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:22 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.9	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-16849878b78k46f8kzwxznephs000000087000000000erqq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.9	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:21 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-16849878b78rjhv97f3nhawr7s000000087000000000qn0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.9	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:22 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-16849878b786vsxz21496wc2qn00000008f0000000008py4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.9	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 97925bc6-b01e-0002-7e3b-261b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-17c5cb586f6qk7x5scs1ghy2m400000001u0000000001bt1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.9	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 6be8f11f-201e-003c-5028-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-r197bdfb6b4ld6jc5asqwvvz0w00000002b000000000ek7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.9	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-16849878b785jrf8dn0d2rczaw00000000w0000000006pa3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.9	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:22 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223822Z-r197bdfb6b4tq6ldv3s2dcykm8000000027g00000000ardt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.9	49758	3.106.27.59	443	2080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:23 UTC	1092	OUT	GET /v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64= HTTP/1.1 Host: image-processing-service.au-1.mimecastcybergraph.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:38:23 UTC	266	IN	HTTP/1.1 308 Date: Thu, 24 Oct 2024 22:38:23 GMT Content-Length: 0 Connection: close Location: https://banner.au-1.mimecastcybergraph.com/tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png Cache-Control: no-store

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.9	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223823Z-16849878b788tnsxzb2smucwdc000000089g00000000m3gu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.9	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223823Z-16849878b787psctgubawhx7k8000000083000000000n6em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.9	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90538902-201e-0096-67fc-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223823Z-15b8d89586ffsjj9qb0gmb1stn00000003qg00000000p7mu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.9	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:23 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: c5ea9194-001e-00ad-143a-26554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223823Z-16849878b786vsxz21496wc2qn00000008bg00000000nad9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.9	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:23 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223824Z-16849878b78k46f8kzwxznephs000000088000000000b52p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.9	49770	18.245.46.89	443	2080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:24 UTC	771	OUT	GET /tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png HTTP/1.1 Host: banner.au-1.mimecastcybergraph.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:38:26 UTC	492	IN	HTTP/1.1 200 OK Content-Type: blank_message.png Content-Length: 84 Connection: close Date: Thu, 24 Oct 2024 22:38:27 GMT Last-Modified: Fri, 05 Apr 2024 09:20:45 GMT ETag: "c791e19fde8325467fa82b06b1bed80b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 43b9d5592d1dc6a44adc7ebaaf183280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: faVWtpwnkNoJs2uD4dT3efrkfVPSfYNleHV5D09zX2xnJky48U-UBg==
2024-10-24 22:38:26 UTC	84	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 0b 49 44 41 54 08 1d 63 60 00 02 00 00 05 00 01 8d bb 9b f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRgAMAaIDATc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.9	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223824Z-16849878b78j7llf5vkyvvcehs00000000s000000000c8rc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.9	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:24 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:24 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223824Z-17c5cb586f67cgf6fyv0p8rq5s00000001k0000000006q6a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:24 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.9	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:24 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:24 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223824Z-16849878b78lhh9t0fb3392enw00000008a0000000002vvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:24 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.9	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:24 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:24 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223824Z-16849878b78rjhv97f3nhawr7s000000088g00000000gd13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:24 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.9	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223824Z-16849878b78x6gn56mgecg60qc00000001e000000000g9bx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.9	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7842422a-e01e-003c-05ee-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223825Z-16849878b786wvrz321uz1cknn00000008cg00000000ang9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.9	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1b3e59d2-d01e-0017-05f8-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223825Z-17c5cb586f6bzvl6c2dt6tbmm400000001qg000000007wxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.9	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223825Z-16849878b787psctgubawhx7k8000000081000000000wxh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.9	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223825Z-r197bdfb6b49q4951yb663v3ds00000000hg00000000nn1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.9	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:25 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223825Z-16849878b787c9z7hb8u9yysp000000008ag00000000uc70 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.9	49782	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:38:26 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=238036 Date: Thu, 24 Oct 2024 22:38:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.9	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223826Z-16849878b78bkvbz1ry47zvsas00000008f0000000000au2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.9	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:26 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:26 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223826Z-16849878b78k8q5pxkgux3mbgg000000088g00000000g6hn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:26 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.9	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:26 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cfffa7b8-401e-0064-673b-2654af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223826Z-16849878b78bkvbz1ry47zvsas00000008b000000000ek71 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.9	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:26 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223826Z-16849878b787psctgubawhx7k8000000088g00000000180g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.9	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:26 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223826Z-17c5cb586f6g6g2sbe6edp75y400000001mg000000007ywu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	49788	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 22:38:27 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=238035 Date: Thu, 24 Oct 2024 22:38:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 22:38:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.9	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:27 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223827Z-16849878b78c5zx4gw8tcga1b4000000083g00000000tx62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.9	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:27 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223827Z-16849878b786lft2mu9uftf3y400000000tg00000000xvng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.9	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:27 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223827Z-16849878b78z5q7jpbgf6e9mcw00000008eg00000000bt98 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.9	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:27 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:27 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223827Z-15b8d89586fwzdd8urmg0p1ebs00000009x000000000d8qs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:27 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.9	49793	18.245.46.89	443	2080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:27 UTC	718	OUT	GET /favicon.ico HTTP/1.1 Host: banner.au-1.mimecastcybergraph.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://banner.au-1.mimecastcybergraph.com/tiFU2DQPOhWnJIn32UZQSQ_1729748950-472e94d559f555e629ca39c464f157fcc269cbea05869a02a1215341.png Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:38:29 UTC	515	IN	HTTP/1.1 200 OK Content-Type: blank_message.png Content-Length: 84 Connection: close Last-Modified: Fri, 05 Apr 2024 09:20:45 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 24 Oct 2024 22:38:29 GMT ETag: "c791e19fde8325467fa82b06b1bed80b" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 43b9d5592d1dc6a44adc7ebaaf183280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: Ht1IJAn8qGpFMd-fTRvXQ080YYP7PEm6_qRCD53EqcwlRJDgDKtyhQ==
2024-10-24 22:38:29 UTC	84	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 0b 49 44 41 54 08 1d 63 60 00 02 00 00 05 00 01 8d bb 9b f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRgAMAaIDATc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.9	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4104ef10-001e-0046-6521-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223828Z-17c5cb586f6dsb4r19gvkc9r7s00000001pg000000008x5p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:28 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.9	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:28 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223828Z-16849878b78p8hrf1se7fucxk800000000mg000000003qvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:28 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.9	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223828Z-16849878b78jfqwd1dsrhqg3aw00000008h0000000000tgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:28 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.9	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:28 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 218b1b25-701e-005c-4b21-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223828Z-17c5cb586f6qs7hge7b080kmr000000001rg000000000rqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:28 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.9	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4f86bdfb-c01e-00ad-5e84-25a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223828Z-15b8d89586fbt6nf34bm5uw08n00000003k0000000007941 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.9	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223829Z-16849878b78p8hrf1se7fucxk800000000g00000000067y6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.9	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:29 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 80bca0f2-601e-00ab-1333-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223829Z-15b8d89586fqj7k5h9gbd8vs9800000000wg0000000032mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.9	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:29 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:29 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223829Z-15b8d89586fcvr6p5956n5d0rc00000005g0000000008fab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.9	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:29 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 9bebe7cf-201e-0033-1046-26b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223829Z-17c5cb586f67p8ffw0hbk5rahw00000001wg000000004py0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.9	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:29 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:29 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 3529fceb-001e-0065-1625-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223829Z-16849878b78j7llf5vkyvvcehs00000000mg00000000xv9r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.9	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:29 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:30 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223829Z-16849878b786wvrz321uz1cknn00000008eg000000002mcb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.9	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:30 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 90c23955-201e-0096-7520-26ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-17c5cb586f65j4snyp1hqk5z2s0000000130000000000dnd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.9	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-17c5cb586f6qk7x5scs1ghy2m400000001t00000000041x4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.9	49804	18.244.164.80	443	2080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	369	OUT	GET /favicon.ico HTTP/1.1 Host: banner.au-1.mimecastcybergraph.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 22:38:32 UTC	492	IN	HTTP/1.1 200 OK Content-Type: blank_message.png Content-Length: 84 Connection: close Date: Thu, 24 Oct 2024 22:38:33 GMT Last-Modified: Fri, 05 Apr 2024 09:20:45 GMT ETag: "c791e19fde8325467fa82b06b1bed80b" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 fee1af928fb542120a907076855ee8f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P8 X-Amz-Cf-Id: gJRNyurc6TpBngBLvNbabrizsnR4vAoLX_GkVwheuK46q9uXg6SNFw==
2024-10-24 22:38:32 UTC	84	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 0b 49 44 41 54 08 1d 63 60 00 02 00 00 05 00 01 8d bb 9b f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRgAMAaIDATc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.9	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:30 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-16849878b78x6gn56mgecg60qc00000001k00000000020kf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.9	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 3c823cf0-801e-00a3-6533-267cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-15b8d89586ff5l62aha9080wv000000000u000000000k4fa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.9	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 91e52722-a01e-0098-6f3d-268556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-r197bdfb6b4hsj5bywyqk9r2xw00000000x000000000s3p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.9	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 9bc6d014-801e-008f-4946-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-17c5cb586f6qk7x5scs1ghy2m400000001p00000000084hb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.9	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:30 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:30 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223830Z-16849878b78k8q5pxkgux3mbgg00000008cg000000002581 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.9	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9791ae07-d01e-0066-7bf2-24ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223831Z-r197bdfb6b4tq6ldv3s2dcykm8000000029g0000000061rk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.9	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223831Z-16849878b78bkvbz1ry47zvsas00000008b000000000ekhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.9	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 7f6d22c4-101e-0046-21f0-2591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223831Z-16849878b78p8hrf1se7fucxk800000000g000000000681r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.9	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223831Z-16849878b78k8q5pxkgux3mbgg00000008b0000000007gd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.9	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:31 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9cf5c506-801e-0083-443d-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223831Z-17c5cb586f677284pnx3kebuu400000001qg000000008v3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.9	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e0b43d58-801e-00ac-6858-26fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223832Z-17c5cb586f67cgf6fyv0p8rq5s00000001m00000000086rz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.9	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 432a0cec-a01e-0098-6be6-258556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223832Z-17c5cb586f677284pnx3kebuu400000001rg000000006e5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.9	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e4dfd9e9-c01e-00ad-24f5-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223832Z-15b8d89586flzzks5bs37v2b9000000003u000000000he8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.9	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223832Z-16849878b785jsrm4477mv3ezn000000086g00000000qzea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.9	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:32 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223832Z-16849878b786vsxz21496wc2qn00000008bg00000000nath x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.9	49822	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:32 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=nmpVEuXpZBnKlaA&MD=lrd4yzb4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 22:38:33 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e083feed-2e12-4b4d-8018-34ca63c5722c MS-RequestId: 5d4ef5f8-ba97-4e2b-b9af-20d37b7ef0c7 MS-CV: EtHD4R+N7UqBQOh8.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 22:38:32 GMT Connection: close Content-Length: 24490
2024-10-24 22:38:33 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 22:38:33 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.9	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 7d0fe5a3-d01e-0049-4537-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223833Z-r197bdfb6b4t7wszkhsu1pyev000000000h000000000eu9d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.9	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223833Z-15b8d89586flzzks5bs37v2b90000000041000000000006y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.9	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: ff6a02c5-601e-003e-572b-263248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223833Z-17c5cb586f6g6g2sbe6edp75y400000001s0000000000r2u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.9	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223833Z-r197bdfb6b4k6h5jmacuw3pcw800000000qg00000000tc17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.9	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:33 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223833Z-15b8d89586fnsf5zd126eyaetw00000000vg000000006wrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:33 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.9	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:34 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223834Z-16849878b78k46f8kzwxznephs000000089g000000005g22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.9	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223834Z-15b8d89586f8l5961kfst8fpb000000009zg00000000c69f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.9	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223834Z-16849878b78dsttbr1qw36rxs8000000088000000000tycf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.9	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223834Z-r197bdfb6b429k2s6br3k49qn400000005pg00000000gafb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.9	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223834Z-16849878b786vsxz21496wc2qn00000008cg00000000h4za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.9	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:35 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223835Z-16849878b787sbpl0sv29sm89s00000008gg000000002c7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.9	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:35 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223835Z-16849878b78p8hrf1se7fucxk800000000dg0000000061zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.9	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223835Z-15b8d89586fsx9lfqmgrbzpgmg0000000fbg000000005qcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.9	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223835Z-16849878b78k8q5pxkgux3mbgg000000088g00000000g749 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.9	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:35 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 5ece5f0b-101e-0028-1a52-268f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223835Z-r197bdfb6b4t7wszkhsu1pyev000000000kg00000000f13b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.9	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223835Z-16849878b78j7llf5vkyvvcehs00000000t0000000009ncw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.9	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:36 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223836Z-r197bdfb6b4g24ztpxkw4umce8000000015g00000000b9pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.9	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:36 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 8c1a2bd7-001e-008d-4028-26d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223836Z-17c5cb586f67cgf6fyv0p8rq5s00000001r0000000002mvu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.9	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ffafe551-c01e-007a-413b-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223836Z-r197bdfb6b4nmq95umz1k4bcyn00000000fg000000002bqm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.9	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:36 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223836Z-16849878b78hz7zj8u0h2zng1400000008c000000000kp7y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.9	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:36 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223836Z-16849878b786wvrz321uz1cknn00000008a000000000hypc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.9	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:36 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 4fea8089-201e-0071-08f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223836Z-r197bdfb6b4gx6v9pg74w9f47s00000001dg00000000bs7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.9	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:37 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:37 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223837Z-16849878b78fmrkt2ukpvh9wh400000008b00000000077p8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:37 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.9	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:37 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:37 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223837Z-16849878b785jrf8dn0d2rczaw00000000vg000000008ezd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.9	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:37 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223837Z-16849878b785g992cz2s9gk35c00000008e0000000003v1q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.9	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:37 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 8bb74e69-501e-005b-14f3-24d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223837Z-r197bdfb6b4gqmwlpwzzs5v83s00000000q00000000077tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.9	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:37 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:37 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223837Z-r197bdfb6b4cz6xrsdncwtgzd40000000qsg000000008nvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:37 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.9	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:37 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:37 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223837Z-16849878b78jfqwd1dsrhqg3aw00000008h0000000000u0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:38 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.9	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:38 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: f7b99165-401e-0035-1ce4-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223838Z-16849878b785dznd7xpawq9gcn00000000zg00000000mhss x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.9	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:38 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223838Z-16849878b78smng4k6nq15r6s4000000015000000000eh3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.9	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:38 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:38 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223838Z-16849878b78s2lqfdex4tmpp7800000008dg0000000068vn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:38 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.9	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:38 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:38 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1da009b5-a01e-0002-0df5-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223838Z-15b8d89586fvpb597drk06r8fc00000000t0000000003u2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:38 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.9	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:38 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:38 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0064e569-401e-0067-43f2-2409c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223838Z-r197bdfb6b4nmq95umz1k4bcyn00000000cg000000002bar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 22:38:38 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.9	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:38 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:38 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223838Z-16849878b786vsxz21496wc2qn00000008b000000000rf8w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:39 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.9	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:39 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a74cd39-001e-0066-3b2c-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223839Z-r197bdfb6b466qclztvgs64z100000000150000000005zfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.9	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:39 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:39 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9175bbc6-101e-0028-0656-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223839Z-r197bdfb6b4tq6ldv3s2dcykm8000000026000000000g5e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:39 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.9	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:39 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:39 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223839Z-16849878b78gvgmlcfru6nuc54000000086g00000000s2ff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:39 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.9	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:39 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:39 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 0ee1a661-001e-000b-6e0b-2215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223839Z-16849878b78jfqwd1dsrhqg3aw00000008dg00000000d65a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:39 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.9	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:39 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:39 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223839Z-16849878b78smng4k6nq15r6s4000000012g00000000tatd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:40 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.9	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:40 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bdc34fbf-001e-0017-613b-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223840Z-17c5cb586f6w4mfs5xcmnrny6n000000011g0000000084rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.9	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 22:38:40 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 22:38:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 22:38:40 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 9f655729-901e-0015-5aae-24b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T223840Z-15b8d89586fbt6nf34bm5uw08n00000003g000000000c0hf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 22:38:40 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5632, Parent PID: 5544

General

Target ID:	0
Start time:	18:38:16
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2080, Parent PID: 5632

General

Target ID:	2
Start time:	18:38:18
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1724,i,6876457295401396945,10357646343283526744,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5964, Parent PID: 5544

General

Target ID:	3
Start time:	18:38:21
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://image-processing-service.au-1.mimecastcybergraph.com/v2/banners?e=TvQ-e1H9wmlB9k5d6wbggARxQwfgXfUx7ZaubUIHj4r47PrWxHcs756vm9ZpMbw-4NzPEExvHMWNDlSG1fSB9-pSeHfWenpv2kplVJ6x90We8UvvbLygsSoHDLu-R74ol81umdMqP6WATfM7zFC1U1z_Zkr5uogz4OSXpi2tXNFAkJWtYycvJmCX21EVKRyIfEMHnsAdNMenLcHhowRJjGbyAqWrjX6uceCpFdekGGDiiFzOqXhf8TAuwBdaKa_NFQ6JIAEJ46WiAfHEzxJyQEw2UHMITJQlVaB7EPdznFdxAB9lZaoQtKp5ZA7eiIcWBrFA1LeXpv9r9OlM1rm7CWFBLuSzaBPF8y-Z8tdnWnzu-M6fFszIT4yJZemKL64="
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5632, Parent PID: 5544

General

Chronological Activities

Analysis Process: chrome.exePID: 2080, Parent PID: 5632

General

Chronological Activities

Analysis Process: chrome.exePID: 5964, Parent PID: 5544