Edit tour

Windows Analysis Report
weekly-finances-report.xlsx

Overview

General Information

Sample name:	weekly-finances-report.xlsx
Analysis ID:	1545474
MD5:	f5b20f951569b6c6e6f0e398b692512c
SHA1:	cb5c3731d3e1a534501df6df842983a97426a95d
SHA256:	eab6f5d40791e2ef277809112b588028237e7ed0d769a0f9735fe29c2adaaaf5
Infos:

Detection

KnowBe4

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Yara detected KnowBe4 simulated phishing

AI detected landing page (webpage, office document or email)

Contains an external reference to another file

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 7092 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 6584 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

chrome.exe (PID: 5472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1960,i,11312333393392567523,16776405467321977601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://token.onelogin.com-token-auth.com/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Sigma Signatures

System Summary

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 3.93.255.10, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 7092, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 49714

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.5, DestinationIsIpv6: false, DestinationPort: 49714, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 7092, Protocol: tcp, SourceIp: 3.93.255.10, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49991 version: TLS 1.0

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 3.93.255.10:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50017 version: TLS 1.2

Source: excel.exe

Memory has grown: Private usage: 2MB later: 126MB

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 104.18.90.62 104.18.90.62
Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49991 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72

Source: global traffic	HTTP traffic detected: GET /XRFZaREExRTA0Wko4MHRSeXFnWEhUUW5oNEF5cFdzN1RvN3dzVzlMWHdHdzlma2Jjc1BNYnNEc1g0WXJQYy9JSWlFVUpIbDE4cGdMcDBLdk54bEZydEJqRTBYdFpoeDZHUGtwZ0tTaVZ3cWZjL2ppVG5KQks1RE0xU21IUzd3PT0tLXVERnZSL2NmN25kNkovUUEtLUIxb3JrOUhOcUxJS1puMmpQNU5DN1E9PQ==?cid=2262276963 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Host: token.onelogin.com-token-auth.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BWm1vu53FzVgaMW&MD=mFVnLu+e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BWm1vu53FzVgaMW&MD=mFVnLu+e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963 HTTP/1.1Host: token.onelogin.com-token-auth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ== HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://token.onelogin.com-token-auth.com/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1Host: cdn2.hubspot.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpimg/landing_pages/css/dd.css HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-69f70dd3792dc7287ac8.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1Host: cdn2.hubspot.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: token.onelogin.com-token-auth.com
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.hubspot.net
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 14:58:45 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 5ff4e2e4-b064-40d7-ad8d-62e09d985001X-Runtime: 0.013791Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 14:58:45 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 653e8bf9-b6e8-49bb-bc33-eac9f8bf43c4X-Runtime: 0.010836Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 14:58:45 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: befa201e-0c8d-475c-96b2-14b812a4def3X-Runtime: 0.015853Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 14:58:46 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 2c8e2255-e90f-473b-8781-7077d7988196X-Runtime: 0.019397Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 14:58:47 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 4d25d22e-038c-4193-b5a1-4bb067bf6fdfX-Runtime: 0.012935Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD41570.0.dr

String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443

Source: unknown	HTTPS traffic detected: 3.93.255.10:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50017 version: TLS 1.2

System Summary

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Source: screenshot	OCR: enable Editing to view this 11 spreadsheet. 12 BJZFPPV./ PT BJZFPPV./ PT KLIZI 14 SHEET? FOLLOW THE
Source: screenshot	OCR: enable Editing to view this 11 spreadsheet. 12 13 14 CAN'T VIEW THE SPREADSHEET? FOLLOW THE STEPS BE
Source: screenshot	OCR: enable Editing to view this 11 spreadsheet. 12 13 14 CAN'T VIEW THE SPREADSHEET? FOLLOW THE STEPS BE
Source: screenshot	OCR: enable Editing to view this 11 spreadsheet. 12 13 14 CAN'T VIEW THE SPREADSHEET? FOLLOW THE STEPS BE
Source: screenshot	OCR: enable Editing to view this 11 spreadsheet. 12 13 14 CAN'T VIEW THE SPREADSHEET? FOLLOW THE STEPS BE

Source: classification engine

Classification label: mal64.phis.evad.winXLSX@20/13@21/16

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\Desktop\~$weekly-finances-report.xlsx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{6AFFC112-A469-4B0E-A070-147928E46DFF} - OProcSessId.dat

Jump to behavior

Source: 85740000.0.dr

OLE indicator, Workbook stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1960,i,11312333393392567523,16776405467321977601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://token.onelogin.com-token-auth.com/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1960,i,11312333393392567523,16776405467321977601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{88d96a0f-f192-11d4-a65f-0040963251e5}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.5.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 85740000.0.dr

Initial sample: OLE zip file path = xl/media/image1.jpg

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: 85740000.0.dr

Initial sample: OLE indicators vbamacros = False

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: Office document	LLM: Page contains button: 'VIEW IN BROWSER' Source: 'Office document'
Source: Office document	LLM: Office document contains prominent button: 'view in browser'

Contains an external reference to another file

Source: drawing1.xml.rels

Extracted files from sample: https://token.onelogin.com-token-auth.com/xrfzareexrta0wko4mhrsexfnwehuuw5onef5cfdzn1rvn3dzvzlmwhdhdzlma2jjc1bnynnec1g0wxjqyy9jswlfvupibde4cgdmcdbldk54bezydejqrtbydfpoedzhugtwz0ttavz3cwzjl2ppvg5kqks1re0xu21iuzd3pt0tlxvernzsl2nmn25knkovuuetluixb3jrouhocuxjs1pummpqnu5dn1e9pq==?cid=2262276963

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 1833			Jump to behavior
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 8135			Jump to behavior

Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Virtualization/Sandbox Evasion	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	1 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
cdn2.hubspot.net	104.18.90.62	true	false	unknown
s3.amazonaws.com	52.216.77.118	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.228	true	false	unknown
secured-login.net	18.232.196.105	true	false	unknown
landing.training.knowbe4.com	3.93.255.10	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.192.193	true	false	unknown
i.imgur.com	unknown	unknown	false	unknown
token.onelogin.com-token-auth.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Reputation
https://secured-login.net/assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css	false	unknown
https://secured-login.net/packs/js/vendor-69f70dd3792dc7287ac8.js	false	unknown
https://secured-login.net/assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css	false	unknown
https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css	false	unknown
https://secured-login.net/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png	false	unknown
https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==	false	unknown
https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css	false	unknown
https://secured-login.net/favicon.ico	false	unknown
https://token.onelogin.com-token-auth.com/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963	false	unknown
https://secured-login.net/assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js	false	unknown
https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false	unknown
https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css	false	unknown
https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png	false	unknown
https://i.imgur.com/QRF01zv.png	false	unknown
https://token.onelogin.com-token-auth.com/XRFZaREExRTA0Wko4MHRSeXFnWEhUUW5oNEF5cFdzN1RvN3dzVzlMWHdHdzlma2Jjc1BNYnNEc1g0WXJQYy9JSWlFVUpIbDE4cGdMcDBLdk54bEZydEJqRTBYdFpoeDZHUGtwZ0tTaVZ3cWZjL2ppVG5KQks1RE0xU21IUzd3PT0tLXVERnZSL2NmN25kNkovUUEtLUIxb3JrOUhOcUxJS1puMmpQNU5DN1E9PQ==?cid=2262276963	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
52.216.77.118	s3.amazonaws.com	United States	16509	AMAZON-02US	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.90.62	cdn2.hubspot.net	United States	13335	CLOUDFLARENETUS	false
3.93.255.10	landing.training.knowbe4.com	United States	14618	AMAZON-AESUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
199.232.192.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
104.18.91.62	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
44.195.159.156	unknown	United States	14618	AMAZON-AESUS	false
18.232.196.105	secured-login.net	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.8
192.168.2.17
192.168.2.4
192.168.2.5
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545474
Start date and time:	2024-10-30 15:56:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	weekly-finances-report.xlsx
Detection:	MAL
Classification:	mal64.phis.evad.winXLSX@20/13@21/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://token.onelogin.com-token-auth.com/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963 Scroll down Close Viewer Override analysis time to 29377.6584 for current running targets taking high CPU consumption Override analysis time to 58755.3168 for current running targets taking high CPU consumption Override analysis time to 117510.6336 for current running targets taking high CPU consumption Override analysis time to 235021.2672 for current running targets taking high CPU consumption

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.109.32.7, 184.28.90.27, 52.113.194.132, 2.16.100.168, 88.221.110.91, 192.229.221.95, 20.42.73.26, 142.250.185.67, 142.250.186.142, 74.125.71.84, 34.104.35.123, 142.250.186.74, 142.250.185.195, 216.58.206.67, 52.182.143.215, 20.42.65.85, 52.168.117.170, 20.189.173.25, 20.42.73.24
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, onedscolprdeus03.eastus.cloudapp.azure.com, clientservices.googleapis.com, a767.dspw65.akamai.net, fs-wildcard.microsoft.com.edgekey.net, clients2.google.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, onedscolprdeus09.eastus.cloudapp.azure.com, update.googleapis.com, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, wu-b-net.trafficmanager.net, onedscolprdeus13.eastus.cloudapp.azure.com, ecs.office.com, fonts.googleapis.com, fs.microsoft.com, onedscolprdeus05.eastus.cloudapp.azure.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, edgedl.me.gvt1.com, s-0005.s-msedge.net, onedscolprdwus20.westus.cloudapp.azure.com, ecs.office.trafficmanager.net, clients.l.google.com, europe.configsvc1.live.com.akadns.net, otelrules.afd.azureedge.net, osiprod-ukw-buff-azsc-000.ukwest.cloudapp.azure.com, eur.roaming1.live.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, ecs-
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: weekly-finances-report.xlsx

Simulations

Behavior and APIs

Time	Type	Description
10:58:39	API Interceptor	29100272x Sleep call for process: splwow64.exe modified

LLM Input / Output

Input	Output
URL: Office document Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "This file is protected by Microsoft Office Spreadsheet Lock. Please enable Editing to view this spreadsheet.", "prominent_button_name": "VIEW IN BROWSER", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: Office document Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft Excel", "Microsoft Office" ] }

URL: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjS Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Go to Weekly Finances Report", "prominent_button_name": "Weekly Finances Report", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: URL: https://secured-login.net
URL: https://secured-login.net/pages/5b6e2d87961b/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjS Model: claude-3-haiku-20240307	```json { "brands": [ "KnowBe4" ] }
	```json { "brands": [ "KnowBe4" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
3.93.255.10	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse
3.93.255.10	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse
104.18.90.62	https://mail.kb4.io/XT0VNMzRJS3djRnBKZnFha1JaVThBUHFHRmpuS2FmSUY4aUszUlY3Sm0rWmpyUWR3ekQzL2xjN0xhVVJlTzhvZzgyMGtTUkxmSWtGdWlUY2I0NStmRWlLS2xHcGZsNTZUN3VyanNiKzVaNjhaeTRSTXFXVGdwc0J4amUxRFFPMU5DTTd5ejl5aXZxUlBwL1NDaDBRSk9DWVJkc09KRUZodTl0SFh5bFVVWEdYZTMzcm5ZTCtCSGpmZWRIMEprQjhiZExvOE9wSGkwUS9KTjQwSVdjQT0tLVBNYWNLTzcyT0xCdDkzb3ItLURlVmNvdGI3d3BGenM5UWJzc1EreXc9PQ==?cid=2260646675	Get hash	malicious	Unknown	Browse
	https://temp.farenheit.net/XL1VkZE1FVGZjL0VwUUt5cWc4dkk1SWpqVFFTMUtQZ0krRFhobktOS05RSWpVMTZIYzk3b3hOUTBoZ2VYdnAzM21wZnYwMVBmdGN0MW12M09qVmMzbnNVeVpkeXBxeHVGd2V4eDRvVlZ5dERsakpjbGV3ZVZxRVhlZ0F6Q3hwQlptYUUyRFhHRzY3YkRXQ3hjWmhBZDBpMkNpakJDSnhzUG9xa2k2ZkdacVpDZVhFVFppeUJLcHJIaC0teVVJeERBTFd0K3k3b01rYS0tRk9zSWNIVEd0blVHZVlhTlFnVUxldz09?cid=2242420613	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse
	https://shared.outlook.inky.com/link?domain=t.ly&t=h.eJxljssOwiAUBX-lYa28yqN21Z2_4JZeQJvSYuA2xhj_3bB2e2YyOR9ylETGjjwQn3VkDGl6s-utB0lOHVkbghrONUd8uRLY6peUXPETOKzLdiSHuVQKeWM2zIoPg-FaWw0XK3g04KW2UfYKuGXCSiOVUNxQIVo-tHwsbodlD3QOKU0-YMkLrkLSXO5N8k36n7HdFt8ffxI6HA.MEQCIE-WvTj_ohujnPNtnzzDp9QpIlKOjktTtaow8gEND0ivAiAfJHmKPDAJs_ObtFYD7pi9fUhw9oS56crd3-YdzE8cGQ	Get hash	malicious	Unknown	Browse
	https://d4g6kw04.na1.hubspotlinks.com/Ctc/I9+113/d4G6KW04/VVDXvw2129f7W9lgpSl3-BQgwW4125np5kh8PvN1n_9Xx5kBl-W50kH_H6lZ3lBW5xCLbK6c416cW6G0HMx6QhV7VVrZqSG3HBKSjV6wDNg4ZyZn6W7_FTpm1dqZm4W723tVM4rftccW3vWlSp1wGvTJW2zXXwV1X740xN1t2gyvnMRlqW7JdFVP1Ty-FHN3Fp_ww3m7TdW66_q2r1Q3VwtW7Dpks077Qf8bM1V49whQ40NW6RphCp8kpt1HV_HZcV84HKmBW5lF7ZC61FD66W73XZV57GJ9ZkVDMN0b9hXGx2W8dysfm3qm-8VMZTWKPM6VCVW6l8ws98dhwKqW4Z2gzl8fZ601N7pH1zqJ5vZ5N90-353vPlZ7VD24xR8Rht6PVyTztF65g6ScN24XQrJRlvxMW20qlrM4TTNP7W6Lc5vQ43Pq7NW32bHwR84HFLgVgWx3d5S85nlf8gcVNq04	Get hash	malicious	Unknown	Browse
	https://bx1f04.na1.hubspotlinks.com/Ctc/2D+113/bX1F04/VWNJB36hmH_dW5B6f4M3tvNPkW6wcfC_5kfpqkN8pR4CT3qn9gW8wLKSR6lZ3lWW4RH0pD8cfc9fW1F_Bh_64Dbx_W8NP5442K_JLsW7VR2DZ6lXzbTW28cFfX9gXt3BW7kls0H2y2hq_W3ngTnJ28DTx_W6DvQHq8CwpszW2lLgbg3Q_MrpW2nSqGh8-5CjqW8mVvJw37-m1FW7tfJZm8wSKY9W920ndF61Cm7DW9fdnsh4qV1mzW6pLzrc94r10SW7SD62m3Qvv5jW87mYgh1YRjnYVKpmxr6B_xWTW3fp6Zx8jLGfWW7jL-y0457X8VN1TltTwsBPcYW7WJ-FL8qLjSdW7qm5WN8GZBkfW95bMcn6zJPqCVf27963J_4FxV1TfBP8XznlQW4GzPL-176L_NW72HRpV192F4df1YJ3TM04	Get hash	malicious	Unknown	Browse
	https://https.file-transfers.ancillarycheese.com/Xcjg5RWIxTzRvV2hJbFQwZ3Z2a0pzaXFnbkcvNzNwRFRScGZIckdFNzZ5YlZmQzJXYVB6L1BtVFZlc2lMc3h1UEVQZGo0b2t4dTRGZlpwbjl2T01qVmp5aTFucHhvMEwzSER3elM0eXMwdFlMaUJQTEU0d0pwd2Z0OWx1Rkg5UUFHNlYzOGVxMUxocEdRQ1MwVzg1QWd1SEZhb2Z5WjErbUxSZkpBS1kxUVBHYjJIa2Jmd21aODJZcy0tRHJmTlZrRzJpMVRrN3o1Ti0tb1loYXJqdksrQVY3c2Y3aWc2RGtGZz09?cid=2142983974	Get hash	malicious	Unknown	Browse
	https://www.bgsu.edu/bursar/online-bill.html	Get hash	malicious	Unknown	Browse
	https://nxt.to/fhndJSr	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://onedrivefileaccess.uwu.ai/	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://www.leadsonline.ca	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://joseordenes.com/n/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9TUZCc01WYz0mdWlkPVVTRVIyODEwMjAyNFUxOTEwMjgxMA==N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	http://wesiakkaernten.fibery.io/@public/forms/gBNXdAWE	Get hash	malicious	Unknown	Browse	13.107.246.45
	byamPER0Gx.exe	Get hash	malicious	LummaC, CryptOne, LummaC Stealer, Mofksys	Browse	13.107.246.45
	4RNoaB1aYY.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
cdn2.hubspot.net	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	104.18.87.62
	https://mail.kb4.io/XT0VNMzRJS3djRnBKZnFha1JaVThBUHFHRmpuS2FmSUY4aUszUlY3Sm0rWmpyUWR3ekQzL2xjN0xhVVJlTzhvZzgyMGtTUkxmSWtGdWlUY2I0NStmRWlLS2xHcGZsNTZUN3VyanNiKzVaNjhaeTRSTXFXVGdwc0J4amUxRFFPMU5DTTd5ejl5aXZxUlBwL1NDaDBRSk9DWVJkc09KRUZodTl0SFh5bFVVWEdYZTMzcm5ZTCtCSGpmZWRIMEprQjhiZExvOE9wSGkwUS9KTjQwSVdjQT0tLVBNYWNLTzcyT0xCdDkzb3ItLURlVmNvdGI3d3BGenM5UWJzc1EreXc9PQ==?cid=2260646675	Get hash	malicious	Unknown	Browse	104.18.90.62
	https://mail.kb4.io/XV2pCbFUvdkZ0U1V3cHZQWXpqL3hjTU9wcmY4ZmEyNXZRWTRiU1VvMTVwRnRrYWdnVjdlM0lLQ3VmVXlCSlpGdkkvQUNJWjZLaHpVWnRmYjY0VktjbmJLUFlpV0xzWTVEdkJsa1hrWXY0dGZHMUNoclZ3aDRORWlpQlNhTlpLSy9pdXMwQXozSHVrYSthQnJrS2J6T0EvSVBMYUFYRG1EZ254WlBRUGdyZU55TkdBZjB0aWhCMFdIN081T2RsdFFIMVpIdFAvU2Q2NXlLKzNJY1JZQ1JNMTBwaDlZPS0tNE01L0hRZXp6Tm50TW1MTS0tSlkrYWNuVllJcXZpelZWZ2ppaVRSdz09?cid=2260646675	Get hash	malicious	Unknown	Browse	104.18.89.62
	https://temp.farenheit.net/XL1VkZE1FVGZjL0VwUUt5cWc4dkk1SWpqVFFTMUtQZ0krRFhobktOS05RSWpVMTZIYzk3b3hOUTBoZ2VYdnAzM21wZnYwMVBmdGN0MW12M09qVmMzbnNVeVpkeXBxeHVGd2V4eDRvVlZ5dERsakpjbGV3ZVZxRVhlZ0F6Q3hwQlptYUUyRFhHRzY3YkRXQ3hjWmhBZDBpMkNpakJDSnhzUG9xa2k2ZkdacVpDZVhFVFppeUJLcHJIaC0teVVJeERBTFd0K3k3b01rYS0tRk9zSWNIVEd0blVHZVlhTlFnVUxldz09?cid=2242420613	Get hash	malicious	Unknown	Browse	104.18.90.62
	https://krebsonsecurity.com/2024/10/patch-tuesday-october-2024-edition	Get hash	malicious	Unknown	Browse	104.18.89.62
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	104.18.91.62
	survey.pdf	Get hash	malicious	PDFPhish	Browse	104.18.88.62
	COVID-19.pdf	Get hash	malicious	PDFPhish	Browse	104.18.87.62
cdnjs.cloudflare.com	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	104.17.24.14
	Review_&_Aprove_Your_Next_Payroll84633.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://cruparcellaire-my.sharepoint.com/:u:/g/personal/dani_grandrcu_com/EffQlMxf6g9Hiljl1DzmuTcB4-lo0t9ejs2hIBwCnQfe1g?e=TtenDj	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://joseordenes.com/n/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9TUZCc01WYz0mdWlkPVVTRVIyODEwMjAyNFUxOTEwMjgxMA==N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.24.14
	401K .pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/creditodigitalelmo.com.br/solo/i2975ufuy18zkhauvhibzzxy/YWRzQGJldHdlZW4udXM=	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://alcatrazpackages.com/elchapo.html	Get hash	malicious	Unknown	Browse	104.17.24.14
s3.amazonaws.com	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	52.216.218.136
s3.amazonaws.com	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	54.231.236.168

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	52.146.128.240
	https://cruparcellaire-my.sharepoint.com/:u:/g/personal/dani_grandrcu_com/EffQlMxf6g9Hiljl1DzmuTcB4-lo0t9ejs2hIBwCnQfe1g?e=TtenDj	Get hash	malicious	Unknown	Browse	20.44.10.122
	0T32Kz4dZU.exe	Get hash	malicious	Stealc, Vidar	Browse	20.44.10.123
	https://www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/cristorei.neemo.com.br/yaya/aALPghQuwJ38KMxdobOJdzxm/YW50b25lbGxhLmNvc3RhQGVzYS5pbnQ=	Get hash	malicious	Tycoon2FA	Browse	150.171.27.10
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.101.168.44
	https://joseordenes.com/n/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9TUZCc01WYz0mdWlkPVVTRVIyODEwMjAyNFUxOTEwMjgxMA==N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	20.75.60.91
	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse	52.109.76.240
	https://onedrive.live.com/view.aspx?resid=8656653D19C3C7C0!s553e3fe901654d86bcc4ed44c7c05dd3&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vYy84NjU2NjUzZDE5YzNjN2MwL0V1a19QbFZsQVlaTnZNVHRSTWZBWGRNQmtvbDQ2b1NlN1o5MGFiazNzS3lGSlE_ZT1UMnQ4S3Y&wd=target%28Sezione%20senza%20titolo.one%7C8d7e5173-6006-4648-a69d-e39e66e7041a%2FAblehnung%20Rechnung%20R15946098273-KU30_WE02%20Vom%2028%5C%2F%7Cd77916b9-b471-429a-a13e-74764563e56b%2F%29&wdorigin=NavigationUrl	Get hash	malicious	Unknown	Browse	52.111.231.17
CLOUDFLARENETUS	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	Set-up.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.145.203
	Review_&_Aprove_Your_Next_Payroll84633.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	162.247.243.29
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.53.206
	Full_Setup.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
AMAZON-02US	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.38
	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	52.216.218.136
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	54.231.236.168
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	52.222.236.122
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	13.32.121.40
	0T32Kz4dZU.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.38
	SecuriteInfo.com.Win32.SuspectCrc.28663.30359.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	https://www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/cristorei.neemo.com.br/yaya/aALPghQuwJ38KMxdobOJdzxm/YW50b25lbGxhLmNvc3RhQGVzYS5pbnQ=	Get hash	malicious	Tycoon2FA	Browse	13.33.187.60
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.122
	http://wesiakkaernten.fibery.io/@public/forms/gBNXdAWE	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	18.198.38.11
AMAZON-AESUS	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	3.93.255.10
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	18.232.196.105
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	18.205.222.128
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	52.71.28.102
	https://www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/cristorei.neemo.com.br/yaya/aALPghQuwJ38KMxdobOJdzxm/YW50b25lbGxhLmNvc3RhQGVzYS5pbnQ=	Get hash	malicious	Tycoon2FA	Browse	3.211.113.112
	Order pdf.exe	Get hash	malicious	DBatLoader, FormBook	Browse	3.5.20.124
	Proforma Fatura ektedir.exe	Get hash	malicious	DBatLoader, FormBook	Browse	3.5.16.19
	LJSS65p4Kz.elf	Get hash	malicious	Unknown	Browse	44.221.131.90
	W6Z9uSRsKQ.elf	Get hash	malicious	Unknown	Browse	54.55.230.199

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	23.1.237.91
	Review_&_Aprove_Your_Next_Payroll84633.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.1.237.91
	https://joseordenes.com/n/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9TUZCc01WYz0mdWlkPVVTRVIyODEwMjAyNFUxOTEwMjgxMA==N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	23.1.237.91
	Biocon-In-Service Agreement.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	23.1.237.91
	https://draxcc.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	Reff_Yazaki-europe_575810710108_ZnjKTIejsM.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	Orden de Compra No. 434565344657.xlam.xlsx	Get hash	malicious	Unknown	Browse	23.1.237.91
	ORDEN7873097067.xlam.xlsx	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	https://token.onelogin.com-token-auth.com/XaFNXZmZxdFUzWDFPWVFxY2lia3BpYkY4UHdlcTNmZStWYjZidGFaMXFldkJJUk9VdmZTZVQxRk5QbVBlVFlJNGttbUlHcmViUysvaGcrWmRnbmwxLzZ6c0MrRWdVcEg1bHZtYnc4c2czNVlSUlhtdnRPc0gwWS9mZ3R4QTltZUZjdWZRZ1kvZmk0N2huS054TUFZUHJyNk4rNHcrNElWbjI0NWlrN2puRlNtYkx0ZzVhWExWcmpZbmt3PT0tLTFCMXhxTFNKS2ZOU3lIZTItLWtCRWhkMzBFQWZwNE0yN1QwM3BCT1E9PQ==?cid=2262276963	Get hash	malicious	KnowBe4	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	Review_&_Aprove_Your_Next_Payroll84633.html	Get hash	malicious	Unknown	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	Setup.exe	Get hash	malicious	RedLine	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	https://onedrivefileaccess.uwu.ai/	Get hash	malicious	Unknown	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	0T32Kz4dZU.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 40.126.32.72 13.107.246.45
	https://www.leadsonline.ca	Get hash	malicious	Unknown	Browse	4.175.87.197 40.126.32.72 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45 3.93.255.10
	Set-up.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.45 3.93.255.10
	Setup.exe	Get hash	malicious	LummaC	Browse	13.107.246.45 3.93.255.10
	Full_Setup.exe	Get hash	malicious	LummaC	Browse	13.107.246.45 3.93.255.10
	Set-up.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.45 3.93.255.10
	Setup.exe	Get hash	malicious	LummaC	Browse	13.107.246.45 3.93.255.10
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45 3.93.255.10
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.45 3.93.255.10
	nG1F5SUnsm.exe	Get hash	malicious	LummaC	Browse	13.107.246.45 3.93.255.10
	byamPER0Gx.exe	Get hash	malicious	LummaC, CryptOne, LummaC Stealer, Mofksys	Browse	13.107.246.45 3.93.255.10

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 4770 bytes, 1 file, at 0x2c +A "disallowedcert.stl", number 1, 1 datablock, 0x1 compression
Category:	dropped
Size (bytes):	4770
Entropy (8bit):	7.946747821604857
Encrypted:	false
SSDEEP:	96:9/nBu64pydcvOHRUfu0xK1bQYMRSRNoYmxYvk56sHMZhh4m:9/nBuP2cGxUfu6K1bpWJ6vfh4m
MD5:	1BFE591A4FE3D91B03CDF26EAACD8F89
SHA1:	719C37C320F518AC168C86723724891950911CEA
SHA-256:	9CF94355051BF0F4A45724CA20D1CC02F76371B963AB7D1E38BD8997737B13D8
SHA-512:	02F88DA4B610678C31664609BCFA9D61DB8D0B0617649981AF948F670F41A6207B4EC19FECCE7385A24E0C609CBBF3F2B79A8ACAF09A03C2C432CC4DCE75E9DB
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................O.................2Wqh .disallowedcert.stl....^K...CK.wTS...:.w.K'.C0T.....Bh.{....C.)......Y@...(..).R."E..D^6........u....\|f~3...o.3. ..SPK.k.o#...."{-.U..P........:..aPr.@.d......Dy.h.....)..:...!./\A.....A<I_<$...q.h..........'.....7....H...@`T..K.S.%...Y4..R.....`.....-....D...(..b..-c."...G.=.dx..S+..2.a.E....d.L...77J...c.[..@..iT&..^78..g....NW6.Ek..FY.F........cNt.O...R..........D...... k........J.y...z.d...;.9_t...].@....yw..}.x....d.t..`f\K..;\|.h.X...4/.;.xT......q>.0...<...3...X..L$.&.,b.....\V....\......G..O..@..H3.....t..J..).x.?.{[..G>.7...<...^Q..z..Gw9P..d....i].n%K}.z..2.Py...A..s...z..@...4..........4.....Y.d..._Z.5.s..fl.C..#.K{9^.E...k..z.Ma..G.(.....5g. ...}.t.#4....$;.,....S@fs....k......u .^2.#_...I........;.......w..P...UCY...$;.S._\|.x..dK...[i..q..^.l..A.?.....'N.. .L.l......m.*.+f#]............A.;.....Z..rIt....RW....Kr1e=8.=.z:Oi.z.d..r..C_......o...]j.N;.s....3@3.dgrv.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	338
Entropy (8bit):	3.168940403418952
Encrypted:	false
SSDEEP:	3:kkFklDFkfllXlE/0htlX16pFRltB+SliQlP8F+RlTRe86A+iRlERMta9b3+AL0Wy:kKSN+SkQlPlEGYRMY9z+s3Ql2DUevat
MD5:	CF5430F2251C26A10C18BA48A55476DD
SHA1:	D27F556D5E2DDF5009DE030C99804A46CBD286C0
SHA-256:	44BA92E897E722691B34A49FE19B5837CACC97B35E8710F558A8F6C5CB32F623
SHA-512:	551DEA819B457075C9952AD8A5BAF6C743611FD35658E3AB2EEEAE47248070735409B637C5EC4F79F30B40264F1332E16968D3E940949B4A8165D84ED4AF4B0B
Malicious:	false
Reputation:	low
Preview:	p...... ..............(....................................................... .........p.........$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".7.4.6.7.8.7.a.3.f.0.d.9.1.:.0."...

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 13:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979907438532641
Encrypted:	false
SSDEEP:	48:8AdlTtZRHmidAKZdA19ehwiZUklqehAy+3:8mrKPy
MD5:	8A42084F531C8294D9EF204E67E5D050
SHA1:	98EE41F159B721D7B1226ED7B72CC427619B8111
SHA-256:	3D1CA928EA82292D8B0C86EDEBE23706CAE679C5961883B242FE62EBD7192287
SHA-512:	D8ADAA2D62DE1BA64CA6B6CB2E2F01AE06E7B9076EEAAACDE65D576DE606EBCEFF75AF2D0BD6E0A71E1734F8FE33FFA65583CA13F35A97B7629D6D1FB35419EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y3w....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^YRw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^YRw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^YRw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^YTw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............\|......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 13:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9969496621239613
Encrypted:	false
SSDEEP:	48:8IdlTtZRHmidAKZdA1weh/iZUkAQkqeh/y+2:8+rA9Qiy
MD5:	AEB3394481EF75D91B2F792D178AE1BA
SHA1:	382B0F4C20F087FE3725A716C38C8A34A9D32A9B
SHA-256:	FD7C7426FBF86ED62702C76D285A0650D28CCE52A1C460665BA9F8420EC9A2B1
SHA-512:	5FD34D04C38E6014D22E77C4DF1D7C95C2F4DE6051588FD1EF85064C89454A5F73A0EAE1416E5612AD8ADE64DA6BD118931BE55B38F50AEAE903DD56C9EABEB6
Malicious:	false
Preview:	L..................F.@.. ...$+.,......3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y3w....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^YRw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^YRw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^YRw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^YTw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............\|......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.007209640400849
Encrypted:	false
SSDEEP:	48:8xzdlTtZsHmidAKZdA14tseh7sFiZUkmgqeh7sZy+BX:8x/r7nLy
MD5:	AEDC54B663CA4976FD58FAA1C914ED5C
SHA1:	72A464072707101CBEF0B365825E3484E6412681
SHA-256:	1974DC9C2FFD427941DBEFA4CB9078355CF977A5C70FF4F59F7052E35C95501F
SHA-512:	311A24B32EB1164D42EA9A8023D3D0D49644F2AEC50990E5D0B034662DF08456BFD51830D07D48404E8F2FDF87312E9ACEBEE2CD3BA8AA212214B4EF6480F60B
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y3w....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^YRw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^YRw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^YRw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............\|......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 13:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992892915378688
Encrypted:	false
SSDEEP:	48:8zdlTtZRHmidAKZdA1vehDiZUkwqehTy+R:8/rLBy
MD5:	02B348F9E132859DF74BCAEC576428B4
SHA1:	52CDE5A454F6150AB9F9FBFF82E334C49F87FFB1
SHA-256:	B1664B9BC521C593C0846E9B56C1E77210089DCA728F5066E2513FD5BFB0BCDE
SHA-512:	CBC886AC16C8A2CBA1B56DC05ADDE08CB2A208E7A383697A77531B6C7035BB4ED026C0FF26A7EC194199AF99D940EE7473BBE29C8AC188DA8B1F7CE51EB76280
Malicious:	false
Preview:	L..................F.@.. ...$+.,....U.3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y3w....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^YRw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^YRw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^YRw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^YTw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............\|......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 13:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.984202473206175
Encrypted:	false
SSDEEP:	48:8HpdlTtZRHmidAKZdA1hehBiZUk1W1qehVy+C:8HxrL91y
MD5:	29F37EAB5D53743F5E90C70E5639D63A
SHA1:	33735712FACB70759BEB4DB9B781DE82606B4A45
SHA-256:	C06CBBF5F1C1AFBA8BC7724C16EE9A1D7DBA2CC33C8642ACE5FBDD8952B59DC6
SHA-512:	62C5328481C1FF2618F0447331CDB07CC792C6B8DD5FE1F2192DC038A1C8A94BDCF4563E4F84D8EDE1AE365C2110403CD39761860483BF14E04AC1C0C091B756
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....z.3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y3w....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^YRw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^YRw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^YRw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^YTw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............\|......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 13:58:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9923843171810662
Encrypted:	false
SSDEEP:	48:84sdlTtZRHmidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:84SrrT/TbxWOvTbLy7T
MD5:	DC2CE4C8C38B5C651C0C76C79C49488A
SHA1:	F27BEE1ABEA5F481808EF645A3C27035A40CE954
SHA-256:	170476A2F64FB710DC4737B55FBCD4F137C547279EA85C293FFAC04C97247EA6
SHA-512:	FF60DCB98F9BD189C787D18C8D5CDBCBDF0DB303418168432C2AC2BE4D8BEA2BE3E92B0F2BBD99A3ADC5A0968E416DE10CCF737067526B179E5085DE51F7C4A7
Malicious:	false
Preview:	L..................F.@.. ...$+.,....Xq.3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y3w....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^YRw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^YRw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^YRw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^YTw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............\|......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\85740000

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	212339
Entropy (8bit):	7.7373676955461015
Encrypted:	false
SSDEEP:	6144:oWDDNWpdFg6GS5ldaIbrPT7hpQocgXNoA1d/4:3eP5ldBr/17NoAPg
MD5:	A116A8E7DAE76AC318F495F563C65390
SHA1:	22240EBD114B0BDC36ABD16496718A1C47C60E41
SHA-256:	5AE0005F98B51A285594193F15E86ED1C4ACE6D5D6FA6886D92B9CD124F54C36
SHA-512:	0541CC31E0606DFAD9D4DEA0998A420A36C62427941AE9D5EB08B4E17A9AFDD31C9BDB7A84A4A7C9D4BA21BA90184BAE3BE5209B72DE87F1B62950BCBEED24BA
Malicious:	false
Preview:	PK..........!.......K.......[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0...H.C.+J...!...#T.<..'.[o........V.K....<.L........s..:$.]..t....KzO..Ls&......pp}...,`..5...>P.E..af,.0S.........SV..u:w.0...o4...%.I.</..5..V$y\.k.r"T.?.P....@.^..V....9:.\|.,.@e!2..ZX...843?...l..B6......L.t..ta...ivX....(..b.B.2......+..1SL.-.....i....i...O......?..d....G.e........g.E.9......4...\|.>...[4.tss~.7B.\|C..........mUMtj..8/`..~.......Mk..[.i...........PK..........!..U0#....L......._rels/.rel

C:\Users\user\Desktop\85740000:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\Desktop\weekly-finances-report.xlsx (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	212339
Entropy (8bit):	7.7373676955461015
Encrypted:	false
SSDEEP:	6144:oWDDNWpdFg6GS5ldaIbrPT7hpQocgXNoA1d/4:3eP5ldBr/17NoAPg
MD5:	A116A8E7DAE76AC318F495F563C65390
SHA1:	22240EBD114B0BDC36ABD16496718A1C47C60E41
SHA-256:	5AE0005F98B51A285594193F15E86ED1C4ACE6D5D6FA6886D92B9CD124F54C36
SHA-512:	0541CC31E0606DFAD9D4DEA0998A420A36C62427941AE9D5EB08B4E17A9AFDD31C9BDB7A84A4A7C9D4BA21BA90184BAE3BE5209B72DE87F1B62950BCBEED24BA
Malicious:	false
Preview:	PK..........!.......K.......[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0...H.C.+J...!...#T.<..'.[o........V.K....<.L........s..:$.]..t....KzO..Ls&......pp}...,`..5...>P.E..af,.0S.........SV..u:w.0...o4...%.I.</..5..V$y\.k.r"T.?.P....@.^..V....9:.\|.,.@e!2..ZX...843?...l..B6......L.t..ta...ivX....(..b.B.2......+..1SL.-.....i....i...O......?..d....G.e........g.E.9......4...\|.>...[4.tss~.7B.\|C..........mUMtj..8/`..~.......Mk..[.i...........PK..........!..U0#....L......._rels/.rel

C:\Users\user\Desktop\~$weekly-finances-report.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.5231029153786204
Encrypted:	false
SSDEEP:	3:sYp5lFltt:sYp5Nv
MD5:	B77267835A6BEAC785C351BDE8E1A61C
SHA1:	FABD93A92989535D43233E3DB9C6579D8174740E
SHA-256:	3B222E766EADC8BC9A8A90AC32FA591F313545B7E8C5D481D378AE307FA798C3
SHA-512:	FFFCBA958E9BD56F284DA19592F124C48B013FCDA2FBE65B3EB38BB644C2B0C978E6DAE99EF213B054813C7212E119B09236A6FFF342D32E52C84DD26DE1E033
Malicious:	false
Preview:	.user ..a.l.f.o.n.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Static File Info

General

File type:	Microsoft OOXML
Entropy (8bit):	7.996524815097187
TrID:	Excel Microsoft Office Open XML Format document (35004/1) 81.40% ZIP compressed archive (8000/1) 18.60%
File name:	weekly-finances-report.xlsx
File size:	174'581 bytes
MD5:	f5b20f951569b6c6e6f0e398b692512c
SHA1:	cb5c3731d3e1a534501df6df842983a97426a95d
SHA256:	eab6f5d40791e2ef277809112b588028237e7ed0d769a0f9735fe29c2adaaaf5
SHA512:	0447b7d7d9891ab17bcd3a740d063f76d72727a96278b95c1122f77a17bfbede7f216786aeaffc6705d341ad9f66867d5297805655510f776e04ad8955972228
SSDEEP:	3072:zw92pRgj0OuGSS3NuurKiw7rj3EWKp8r+z5BqoCiqFo7UuCsY:Mwgjp3SYuyReEWK2IBuiqFcURF
TLSH:	EA0423364FBE914ED72EC1B0F8A43CE4EB03A01C5227F566657A7901BFD2DECA641096
File Content Preview:	PK.........u^YkG..r...K.......[Content_Types].xml.U.j.0.....F.b+I...'...6...Tkl+..F.....PB...h/.m.m...?\*....0:'..C....BW9.....$A.4g.h.......7....&..1'....R,jP.3cA...8.\|.t......h..y.....O}. ....l&}.....I.H$.....r....`>....{...!......x....t.;....&.....+.X.

File Icon


Icon Hash:	35e58a8c0c8a85b9

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 15:57:39.473229885 CET	49675	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:57:39.535731077 CET	49674	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:57:39.598303080 CET	49673	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:57:40.620671034 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:40.620712996 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:40.620836973 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:40.621164083 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:40.621180058 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.346539974 CET	443	49703	23.1.237.91	192.168.2.5
Oct 30, 2024 15:57:41.346646070 CET	49703	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:57:41.450258017 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.450351000 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:41.453577042 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:41.453597069 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.453836918 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.455084085 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:41.499339104 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.718823910 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.718899012 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:41.718966007 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:41.718966007 CET	49714	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:57:41.718993902 CET	443	49714	3.93.255.10	192.168.2.5
Oct 30, 2024 15:57:44.227195024 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:44.227246046 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:44.227339983 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:44.229353905 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:44.229372978 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.334139109 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.334372997 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.369425058 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.369484901 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.369720936 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.370917082 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.370980978 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.371016026 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.725490093 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.770071030 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.770106077 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.770312071 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.770467997 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.770497084 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.770541906 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.770587921 CET	49717	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.770605087 CET	443	49717	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.802978992 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.803014994 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.803227901 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.804301023 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.804316044 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.852979898 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.853041887 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:45.853269100 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.853269100 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:45.853301048 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.921181917 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.921341896 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.933957100 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.933988094 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.934250116 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.934777021 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.934815884 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.934844017 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.959491968 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.960041046 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.960066080 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.961854935 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.961860895 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:46.961884022 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:46.961889982 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:47.332036018 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:47.379554987 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:47.379609108 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:47.380368948 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:47.380397081 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:47.380652905 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:47.380692005 CET	443	49719	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:47.380762100 CET	49719	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.864779949 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.864804029 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.864834070 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.864885092 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.864892960 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.864934921 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.864985943 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.865603924 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.865603924 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.865614891 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.865751028 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.865777969 CET	443	49720	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.865854025 CET	49720	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.970206976 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.970252037 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:48.970383883 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.970577955 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:48.970590115 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:49.911997080 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:49.912039042 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:49.912102938 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:49.912498951 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:49.912512064 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.095019102 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.095567942 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.095583916 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.096210957 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.096210957 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.096218109 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.096227884 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.215847015 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:50.215887070 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:50.215975046 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:50.217087030 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:50.217102051 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:50.646172047 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.646486998 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.647883892 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.647902966 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.648236036 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.656984091 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.703330040 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.828001022 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.828028917 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.828069925 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.828125954 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.828138113 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.828147888 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.828775883 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.828775883 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.828790903 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.828953981 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.828983068 CET	443	49722	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.829082966 CET	49722	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.879847050 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.879878044 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.879898071 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.879929066 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.879951000 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.879982948 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.880004883 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.904320955 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.904349089 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.904383898 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.904402971 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.904428005 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.904455900 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.915725946 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.915769100 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.915900946 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.916264057 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:50.916286945 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:50.995954037 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.995990038 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.996063948 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.996063948 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:50.996078014 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:50.996145010 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.019872904 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.019906998 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.019989967 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.019989967 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.020000935 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.020087004 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.021622896 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.021650076 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.021684885 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.021691084 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.021742105 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.021742105 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.023387909 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.023412943 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.023479939 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.023479939 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.023489952 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.023602962 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.112879992 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.112910986 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.112950087 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.112967014 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.113028049 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.113028049 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.135438919 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.135462999 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.135545015 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.135562897 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.135788918 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.136538029 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.136559010 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.136600018 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.136605978 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.136646032 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.136646032 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.137753963 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.137773991 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.137882948 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.137888908 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.137958050 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.138992071 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.139012098 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.139064074 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.139070034 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.139112949 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.139112949 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.139791012 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.139813900 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.139903069 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.139904022 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.139909983 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.140091896 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.239571095 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.239599943 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.239648104 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.239721060 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.239721060 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.239736080 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.239752054 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.239866972 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.239866972 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.239959002 CET	49723	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.239976883 CET	443	49723	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.283695936 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.283755064 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.285479069 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.286720037 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.286752939 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.286951065 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.288077116 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.288131952 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.288264036 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.289066076 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.289108992 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.289625883 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.289634943 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.289661884 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.289686918 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.290008068 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.290029049 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.290086985 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.290086985 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.290102005 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.290117025 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.290407896 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.290417910 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.290577888 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:51.290590048 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:51.809577942 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:51.809673071 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:51.811513901 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:51.811522961 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:51.811785936 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:51.863837004 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:51.875972033 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:51.919332027 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:52.018665075 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:52.019228935 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:52.019248962 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:52.019495964 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.020039082 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.020060062 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.020853043 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.020863056 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.021003008 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:52.021013021 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:52.021065950 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:52.021073103 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:52.027303934 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.027873993 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.027892113 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.028248072 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.028255939 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.029441118 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.029798985 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.029829025 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.030198097 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.030205965 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.059595108 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.060444117 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.060472965 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:52.061140060 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:52.061147928 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.152965069 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.152973890 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.152981997 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153040886 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153048992 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153063059 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153067112 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153126001 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153196096 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153197050 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153215885 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153239965 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153276920 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153405905 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153454065 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153687954 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153702974 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.153779030 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.153784990 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.154696941 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.154722929 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.154808044 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.154814005 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.155159950 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.155179024 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.155211926 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.155239105 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.155256033 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.155272007 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.155291080 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.155653000 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155673981 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155684948 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155714989 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155725002 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155740023 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155755043 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:53.155777931 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.155788898 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:53.155822992 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:53.156924963 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.156929970 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.156945944 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.156949043 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.157598019 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.157605886 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.157630920 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.157635927 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.159142971 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.159162998 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.159189939 CET	49726	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.159197092 CET	443	49726	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.164467096 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.164529085 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.164609909 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:53.164609909 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:53.168306112 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.168344975 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.168425083 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.170115948 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.170130014 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.172784090 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.172822952 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.173021078 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.173314095 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.173326015 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.174933910 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.174949884 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.174998999 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.175333023 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.175345898 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.180376053 CET	49724	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:57:53.180402040 CET	443	49724	4.175.87.197	192.168.2.5
Oct 30, 2024 15:57:53.181638956 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.181668043 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.181827068 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.182418108 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.182434082 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.288316011 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.288364887 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.288449049 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.288985968 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:53.288997889 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:53.903352022 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.904241085 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.904273033 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.904629946 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.904634953 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.912798882 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.913186073 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.913201094 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.913619041 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.913624048 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.913667917 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.913971901 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.913980007 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.914323092 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.914328098 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.963920116 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.964529991 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.964546919 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:53.964909077 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:53.964914083 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.044384003 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.047688007 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.047841072 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.047862053 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.047909975 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.047993898 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.048011065 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.048017979 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.048017979 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.048031092 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.048037052 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.048054934 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.048075914 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.050920010 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.050962925 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.050992966 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.051033020 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.051034927 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.051167965 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.051177979 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.051208973 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.051429987 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.051439047 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.092406988 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.092688084 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.092742920 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.092775106 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.092787027 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.092797995 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.092802048 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.095282078 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.095316887 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.095508099 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.095664978 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.095674992 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.096534014 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.096688032 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.096844912 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.096844912 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.096844912 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.099513054 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.099545956 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.099622965 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.099745035 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.099757910 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.407869101 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.407974958 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.410471916 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.410485029 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.410707951 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.410718918 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.410742998 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.412058115 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.412096977 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.412122011 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.791697025 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.792383909 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.792426109 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.792742014 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.792745113 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.797154903 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.797177076 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.797246933 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.797283888 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.797655106 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.797668934 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.797799110 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.797821045 CET	443	49736	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.797875881 CET	49736	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.840329885 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.840384960 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.845576048 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.845599890 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.845670938 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.845683098 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.846204042 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.846209049 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.846324921 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.846328974 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.851923943 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.852303982 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.852322102 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.852720022 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.852724075 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.865582943 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.865617990 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.865696907 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.865890026 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:54.865902901 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:54.924041986 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.924108028 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.924175978 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.924423933 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.924437046 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.924455881 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.924462080 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.928025961 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.928066969 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.928132057 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.928417921 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.928433895 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.971682072 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.971767902 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.971884012 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.972124100 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.972145081 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.972155094 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.972161055 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.974227905 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.974313021 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.974390984 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.974581003 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.974596024 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.974608898 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.974613905 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.982161045 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.982206106 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.982273102 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.982362032 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.982402086 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.982510090 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.982525110 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.982533932 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.982726097 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.982742071 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.987145901 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.987212896 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.987267017 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.987445116 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.987464905 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.987478018 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.987483025 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.991147995 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.991168976 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:54.991250038 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.991389990 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:54.991399050 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.677145004 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.677906990 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.677937031 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.678386927 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.678390980 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.726537943 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.727152109 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.727185011 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.727710962 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.727716923 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.733081102 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.734271049 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.734304905 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.734623909 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.734628916 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.743550062 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.744692087 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.744726896 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.745142937 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.745151997 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.825448990 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.825509071 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.825553894 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.825758934 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.825781107 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.825793028 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.825798035 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.828423023 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.828460932 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.828531981 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.828670979 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.828685045 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.865999937 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.866084099 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.866137028 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.866323948 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.866344929 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.866355896 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.866362095 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.866738081 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.867554903 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.867727041 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.867829084 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.867851019 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.870728016 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.870762110 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.870830059 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.871242046 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.871256113 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.872019053 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.872045040 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.872186899 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.872370005 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.872381926 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.877028942 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.877094984 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.877154112 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.877284050 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.877300978 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.877316952 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.877321959 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.880532026 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.880565882 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.880621910 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.880899906 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:55.880913019 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:55.986920118 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:55.987499952 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:55.987524033 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:55.988228083 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:55.988233089 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:55.988275051 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:55.988286018 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.537025928 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.537054062 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.537097931 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.537144899 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.537178040 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.537194967 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.539680958 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.539699078 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.539707899 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.539860010 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.539894104 CET	443	49741	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.539944887 CET	49741	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.578717947 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.579078913 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.579098940 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.579530001 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.579535007 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.608488083 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.608865976 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.608896971 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.609316111 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.609321117 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.628140926 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.628196955 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.628293991 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.628492117 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:56.628505945 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:56.640367985 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.640763044 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.640782118 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.641216040 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.641222000 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.712481022 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.712538958 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.712733030 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.712799072 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.712810040 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.712820053 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.712824106 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.715471029 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.715498924 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.715604067 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.715784073 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.715795994 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.740715027 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.741013050 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.741134882 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.741152048 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.741158009 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.741168976 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.741173029 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.744198084 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.744232893 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.744338989 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.744473934 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.744488001 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.809720993 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.809838057 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.810022116 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.810059071 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.810059071 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.810076952 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.810085058 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.812699080 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.812732935 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:56.812889099 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.812973976 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:56.812987089 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.320362091 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.321187019 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.321223974 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.321698904 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.321705103 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.435426950 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.436646938 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.436671019 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.437097073 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.437104940 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.491134882 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.491292953 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.491430998 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.491473913 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.491487026 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.491519928 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.491525888 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.494133949 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.494174004 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.494251966 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.494412899 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.494426012 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.501163960 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.501517057 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.501529932 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.501974106 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.501979113 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.565367937 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.565483093 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.565623045 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.565646887 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.565660954 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.565671921 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.565675974 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.568805933 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.568842888 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.569030046 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.569067955 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.569073915 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.631208897 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.631460905 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.631527901 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.631553888 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.631561995 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.631572962 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.631577015 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.634198904 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.634226084 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.634296894 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.634454966 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.634469032 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.877875090 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:57.878840923 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:57.878858089 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:57.879093885 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.880366087 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:57.880373955 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:57.880404949 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:57.880413055 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:57.880906105 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.880925894 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:57.881360054 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:57.881366014 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.016170979 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.016505957 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.016591072 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.016832113 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.016851902 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.016872883 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.016879082 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.019969940 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.019999981 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.020122051 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.020313978 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.020328045 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.240952969 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.240978956 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.241018057 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.241094112 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.241111994 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.241139889 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.241616011 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.241627932 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.241636992 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.241748095 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.241760969 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.241792917 CET	443	49750	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.243124008 CET	49750	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.243541956 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.243572950 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.243984938 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.243990898 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.297825098 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.297858953 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.297967911 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.298125982 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:58.298135042 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:58.334486961 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.335071087 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.335093975 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.335530996 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.335542917 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.374604940 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.374739885 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.374936104 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.375101089 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.375101089 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.375118017 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.375127077 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.377717018 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.377762079 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.377851009 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.378005981 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.378021002 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.476222038 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.476277113 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.476372004 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.476650000 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.476650000 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.476670980 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.476689100 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.479594946 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.479629993 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.479728937 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.479902029 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.479916096 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.612149000 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.612895966 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.612925053 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.613375902 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.613382101 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.745403051 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.745461941 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.745522022 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.745724916 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.745734930 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.745745897 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.745750904 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.748284101 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.748322964 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.748410940 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.748555899 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.748568058 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.767798901 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.768440962 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.768457890 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.768914938 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.768920898 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.899306059 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.899414062 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.899466991 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.899873018 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.899892092 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.899902105 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.899908066 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.903230906 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.903275013 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:58.903331041 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.903495073 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:58.903506041 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.110219955 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.111030102 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.111048937 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.111522913 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.111527920 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.209928036 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.210475922 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.210509062 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.210933924 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.210946083 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.246069908 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.246135950 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.246181965 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.246404886 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.246431112 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.246445894 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.246452093 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.249214888 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.249253988 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.249336004 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.249454021 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.249461889 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.365334034 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.366682053 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.366802931 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.366904020 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.366925001 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.366961002 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.366967916 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.370038033 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.370135069 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.370228052 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.370373964 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.370388031 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.422457933 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.426228046 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.426242113 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.427329063 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.427335024 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.427397966 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.427403927 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.500787020 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.501394987 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.501420975 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.501952887 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.501959085 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.629852057 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.630670071 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.630697012 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.631131887 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.631136894 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.633455038 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.633522987 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.633600950 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.633785963 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.633809090 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.633821011 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.633827925 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.636177063 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.636226892 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.636307955 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.636428118 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.636439085 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.760622978 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.760699987 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.760822058 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.761305094 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.761331081 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.761341095 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.761347055 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.764333010 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.764398098 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.764489889 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.764655113 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.764672041 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.847176075 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.847201109 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.847238064 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.847563982 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.847570896 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.847898006 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.847914934 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.847927094 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.848062992 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.848095894 CET	443	49758	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.848140001 CET	49758	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.892874002 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.892932892 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.892999887 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.893170118 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:57:59.893184900 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:57:59.970716953 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.971518040 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.971544027 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:57:59.971991062 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:57:59.971997023 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.095876932 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.096421003 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.096451044 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.096873045 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.096879005 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.101546049 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.101612091 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.101694107 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.101840973 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.101860046 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.101870060 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.101876020 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.104409933 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.104450941 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.104602098 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.104916096 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.104931116 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.241581917 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.241651058 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.241715908 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.241916895 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.241946936 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.241962910 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.241970062 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.244678974 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.244735956 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.244890928 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.245229006 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.245250940 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.371942043 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.372530937 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.372562885 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.373012066 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.373018026 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.496023893 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.496656895 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.496712923 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.497139931 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.497159004 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.504563093 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.504741907 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.504812002 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.504996061 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.505014896 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.505028009 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.505033970 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.507920980 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.507963896 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.508064985 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.508199930 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.508214951 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.626600981 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.626677036 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.626925945 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.626960039 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.626985073 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.626997948 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.627006054 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.630707026 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.630754948 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.630867004 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.630997896 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.631016016 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.835397005 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.836021900 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.836059093 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.836493015 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.836500883 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.963551044 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.963618994 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.963691950 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.964046001 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.964063883 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.964072943 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.964077950 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.967334032 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.967377901 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.967447042 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.967590094 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:00.967607021 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:00.995565891 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:00.996753931 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:00.996778011 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:00.997411013 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:00.997416019 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:00.997525930 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:00.997540951 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.244411945 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.245028019 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.245065928 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.245500088 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.245505095 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.370796919 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.371334076 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.371351004 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.371781111 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.371797085 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.375474930 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.375679016 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.375736952 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.375782013 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.375782013 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.375802994 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.375813961 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.378216028 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.378263950 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.378335953 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.378456116 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.378463984 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.413454056 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.413477898 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.413515091 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.413657904 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:01.413657904 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:01.413688898 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.414021015 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:01.414027929 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.414043903 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:01.414200068 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.414232969 CET	443	49767	40.126.32.72	192.168.2.5
Oct 30, 2024 15:58:01.414277077 CET	49767	443	192.168.2.5	40.126.32.72
Oct 30, 2024 15:58:01.540678024 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.541013956 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.541066885 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.541150093 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.541150093 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.541173935 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.541184902 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.543621063 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.543668032 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.543751955 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.543934107 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.543951988 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.716012001 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.720510960 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.720531940 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.720971107 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.720978975 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.877022982 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.877120018 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.877187014 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.877367020 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.877403975 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.877422094 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.877430916 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.880588055 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.880625963 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:01.880717039 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.880898952 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:01.880912066 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.112864017 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.113607883 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.113627911 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.114078999 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.114083052 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.243290901 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.243371010 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.243422031 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.243590117 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.243608952 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.243619919 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.243624926 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.246373892 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.246409893 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.246581078 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.246633053 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.246639013 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.292924881 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.293392897 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.293410063 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.294074059 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.294079065 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.426629066 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.426690102 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.426762104 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.427737951 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.427752018 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.427767038 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.427772999 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.430907011 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.430943012 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.431040049 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.431226015 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.431241035 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.621365070 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.621932983 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.621947050 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.622545958 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.622551918 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.754023075 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.754208088 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.754271030 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.754745007 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.754765034 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.754776001 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.754781008 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.758239985 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.758279085 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:02.758373976 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.758553028 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:02.758569002 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.164115906 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.164804935 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.164825916 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.165440083 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.165446043 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.206881046 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.209492922 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.209513903 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.210124016 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.210130930 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.297319889 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.297450066 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.297564983 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.297808886 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.297825098 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.297832966 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.297840118 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.300966024 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.300982952 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.301064968 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.301227093 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.301237106 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.343374968 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.343661070 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.343738079 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.343781948 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.343781948 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.343802929 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.343816996 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.346291065 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.346318960 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.346389055 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.346523046 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.346534967 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.495948076 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.496640921 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.496656895 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.497195959 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.497201920 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.626355886 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.627214909 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.627404928 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.627404928 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.627404928 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.630183935 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.630213976 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.630301952 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.630569935 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.630584955 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:03.942003012 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:03.942033052 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.069932938 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.070655107 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.070677996 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.071053028 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.071058035 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.118854046 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.119503021 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.119528055 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.119934082 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.119940042 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.209796906 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.209870100 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.209952116 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.210175991 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.210194111 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.210206985 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.210212946 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.212963104 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.213016987 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.213078976 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.213251114 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.213263035 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.258557081 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.258632898 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.258924961 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.258960009 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.258976936 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.258991957 CET	49780	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.258996964 CET	443	49780	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.261887074 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.261935949 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.262039900 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.262222052 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.262237072 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.376140118 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.376708031 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.376749992 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.377144098 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.377150059 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.463907957 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.469484091 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.469517946 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.470024109 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.470038891 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.509622097 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.509778023 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.509833097 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.509952068 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.509968996 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.509982109 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.509987116 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.512465000 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.512521982 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.512592077 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.512723923 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.512739897 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.627120972 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.627183914 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.627244949 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.627393961 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.627393961 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.627419949 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.627433062 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.631989956 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.632028103 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.632097960 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.635305882 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.635330915 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.949263096 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.949769020 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.949789047 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.950228930 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.950234890 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.985378027 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.986171961 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.986202955 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:04.986747026 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:04.986753941 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.079071045 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.079267979 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.079359055 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.079469919 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.079489946 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.079503059 CET	49782	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.079508066 CET	443	49782	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.082334042 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.082386971 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.082469940 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.082695961 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.082712889 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.114823103 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.114893913 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.114948034 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.115067005 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.115087032 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.115119934 CET	49783	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.115124941 CET	443	49783	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.117501974 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.117538929 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.117619038 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.117759943 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.117774010 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.249106884 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.249759912 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.249784946 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.250309944 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.250313997 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.376076937 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.376564026 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.376597881 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.377018929 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.377027988 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.378173113 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.378246069 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.378420115 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.378454924 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.378454924 CET	49784	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.378473043 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.378482103 CET	443	49784	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.381222010 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.381263018 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.381345034 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.381462097 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.381475925 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.518306971 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.518371105 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.518511057 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.518742085 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.518759012 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.518791914 CET	49785	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.518799067 CET	443	49785	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.521548033 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.521584034 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.521650076 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.521769047 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.521784067 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.816557884 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.817801952 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.817828894 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.818240881 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.818247080 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.865339041 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.869190931 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.869213104 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.869640112 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.869649887 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.948519945 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.948570013 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.948641062 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.948848009 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.948872089 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.948888063 CET	49786	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.948894978 CET	443	49786	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.951495886 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.951534986 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.951869011 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.952195883 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.952209949 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.997970104 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.998027086 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.998090029 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.998301029 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.998313904 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:05.998330116 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:05.998334885 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.002142906 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.002176046 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.002269983 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.002470970 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.002485991 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.113626957 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.114097118 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.114111900 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.114551067 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.114556074 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.244815111 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.244879961 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.245130062 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.245165110 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.245186090 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.245194912 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.245201111 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.247745991 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.247783899 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.247888088 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.248045921 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.248059034 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.252135038 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.252513885 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.252533913 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.252878904 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.252883911 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.383862019 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.383927107 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.384313107 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.384313107 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.384313107 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.386852980 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.386894941 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.386967897 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.387140036 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.387156963 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.685558081 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.686033010 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.686064005 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.686491013 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.686496019 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.691967010 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.691992998 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.751123905 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.751576900 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.751591921 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.752031088 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.752036095 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.817994118 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.818103075 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.818157911 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.818837881 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.818859100 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.818869114 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.818873882 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.821587086 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.821630955 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.821696997 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.821816921 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.821825981 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.884927034 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.885166883 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.885313988 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.885533094 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.885555983 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.885565996 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.885571957 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.888143063 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.888189077 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.888288021 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.888437033 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.888451099 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.968636990 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.969171047 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.969183922 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:06.969605923 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:06.969609976 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.098547935 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.098675013 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.098767996 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.099029064 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.099047899 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.099059105 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.099065065 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.102251053 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.102298021 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.102382898 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.102559090 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.102567911 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.126276970 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.126713037 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.126737118 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.127134085 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.127144098 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.256345034 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.256642103 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.256721020 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.256905079 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.256905079 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.256926060 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.256936073 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.259494066 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.259529114 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.259615898 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.259773970 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.259782076 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.545253038 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.568676949 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.568743944 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.569243908 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.569252014 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.631908894 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.634748936 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.634773016 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.635282993 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.635293007 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.693515062 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.693576097 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.693860054 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.693897963 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.693917036 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.693927050 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.693933964 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.696712971 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.696749926 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.696832895 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.697011948 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.697022915 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.763525009 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.763864994 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.763942003 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.764033079 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.764049053 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.764066935 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.764072895 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.767014027 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.767047882 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.767128944 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.767267942 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.767282009 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.881557941 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.882848024 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.882882118 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:07.883416891 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:07.883421898 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.017093897 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.017179012 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.017278910 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.017422915 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.017442942 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.017455101 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.017461061 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.020971060 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.021007061 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.021179914 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.021375895 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.021393061 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.023127079 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.023783922 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.023813963 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.024405003 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.024413109 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.157697916 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.157896042 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.157958984 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.158088923 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.158108950 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.158124924 CET	49797	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.158130884 CET	443	49797	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.161700964 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.161737919 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.161876917 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.162075043 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.162095070 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.438935995 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.439904928 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.439934969 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.440223932 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.440228939 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.502147913 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.502897024 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.502929926 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.503468990 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.503475904 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.575016975 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.575321913 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.575450897 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.584774017 CET	49798	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.584795952 CET	443	49798	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.588107109 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.588150024 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.588270903 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.588413954 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.588427067 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.637693882 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.637779951 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.638027906 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.638070107 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.638092041 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.638113976 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.638119936 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.640930891 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.640981913 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.641081095 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.641271114 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.641288996 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.753433943 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.755943060 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.755964041 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.756587982 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.756593943 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.884823084 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.884896994 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.885092974 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.885297060 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.885318041 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.885446072 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.885452032 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.888588905 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.888638020 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.888873100 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.889101982 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.889120102 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.905183077 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.905736923 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.905766964 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:08.906200886 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:08.906208038 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.036571026 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.036676884 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.036729097 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.037056923 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.037075043 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.043216944 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.043251038 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.043332100 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.043756962 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.043767929 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.331068993 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.331877947 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.331892014 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.332310915 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.332314968 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.411173105 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.412451982 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.412480116 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.412933111 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.412936926 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.465570927 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.465648890 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.465783119 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.466265917 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.466284990 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.466310978 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.466316938 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.469814062 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.469861984 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.469989061 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.470190048 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.470201015 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.546797991 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.546890974 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.547205925 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.547260046 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.547260046 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.547285080 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.547296047 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.550196886 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.550262928 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.550371885 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.550601959 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.550617933 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.664223909 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.665617943 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.665644884 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.666059017 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.666065931 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.796197891 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.796286106 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.796488047 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.796559095 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.796577930 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.796592951 CET	49804	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.796598911 CET	443	49804	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.799977064 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.800060034 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.800154924 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.800355911 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.800391912 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.800504923 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.800918102 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.800951004 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.801393986 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.801402092 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.931304932 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.931401014 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.931634903 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.931682110 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.931695938 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.931708097 CET	49805	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.931714058 CET	443	49805	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.934700012 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.934736967 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:09.934833050 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.935091972 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:09.935102940 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.201301098 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.201967955 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.201984882 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.202588081 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.202594995 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.285665989 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.289525986 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.289551973 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.290205956 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.290215015 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.385844946 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.385970116 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.386089087 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.386382103 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.386404991 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.386416912 CET	49806	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.386421919 CET	443	49806	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.389951944 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.389993906 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.390101910 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.390306950 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.390325069 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.418960094 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.418987989 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.419049025 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.419053078 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.419095039 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.419349909 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.419368029 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.419379950 CET	49807	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.419384956 CET	443	49807	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.422508955 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.422555923 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.422645092 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.422902107 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.422919989 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.553323984 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.554260969 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.554291964 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.554971933 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.554984093 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.667993069 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.673249006 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.673263073 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.673834085 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.673839092 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.692920923 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.692996025 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.693145037 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.693229914 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.693253994 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.693269014 CET	49808	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.693274975 CET	443	49808	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.696496010 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.696535110 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.696618080 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.696790934 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.696806908 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.798470974 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.799360037 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.799494028 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.799544096 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.799544096 CET	49809	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.799571991 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.799587965 CET	443	49809	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.803411961 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.803452969 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:10.803528070 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.803661108 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:10.803674936 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.155920982 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.156578064 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.156603098 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.157011032 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.157021046 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.167170048 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.167538881 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.167562962 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.167884111 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.167890072 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.288743973 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.288774967 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.288830042 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.288876057 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.288876057 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.289170027 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.289170027 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.289187908 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.289197922 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.292618990 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.292649031 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.292735100 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.292923927 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.292941093 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.315949917 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.315979004 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.316034079 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.316060066 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.316221952 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.316237926 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.316247940 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.316416979 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.316457987 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.316512108 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.327891111 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.327930927 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.327996016 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.328190088 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.328202963 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.443969011 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.444730043 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.444777966 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.445239067 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.445252895 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.534882069 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.535564899 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.535583019 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.536145926 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.536151886 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.578468084 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.578495026 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.578594923 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.578608990 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.578645945 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.578924894 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.578924894 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.578948975 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.578962088 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.581954956 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.582003117 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.582089901 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.582314968 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.582321882 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.664515972 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.664805889 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.665015936 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.689800978 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.689826965 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.689834118 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.689841032 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.693062067 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.693119049 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.693255901 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.693500996 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.693514109 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.786051989 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.792948008 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.793010950 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:11.793087006 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.793277979 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:11.793289900 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.039980888 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.040720940 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.040741920 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.041398048 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.041403055 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.062365055 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.062760115 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.062783957 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.063178062 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.063184023 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.171614885 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.171689987 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.171746969 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.171997070 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.172013998 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.172023058 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.172028065 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.174954891 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.174997091 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.175097942 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.175296068 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.175311089 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.193898916 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.194010019 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.194101095 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.194142103 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.194154978 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.194166899 CET	49815	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.194170952 CET	443	49815	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.196352005 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.196434975 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.196525097 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.196666956 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.196697950 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.307921886 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.308537960 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.308559895 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.308984041 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.308990002 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.424587011 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.425371885 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.425406933 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.425841093 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.425846100 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.436666012 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.436738014 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.436956882 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.436997890 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.437015057 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.437025070 CET	49816	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.437030077 CET	443	49816	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.439692020 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.439732075 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.439821959 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.439974070 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.439987898 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.526818991 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.526921988 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.528132915 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.528140068 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.528501034 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.529318094 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.554204941 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.554352045 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.554548979 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.556976080 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.556976080 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.556998968 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.557008982 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.557647943 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.557703972 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.557780981 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.557957888 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.557971954 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.571333885 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.659140110 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.659238100 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.659514904 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.659568071 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.659568071 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.659594059 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.659605026 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.665184975 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.665235996 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.665314913 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.665491104 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.665504932 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.906553984 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.906641960 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.908260107 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.908282995 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.908554077 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.909513950 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.943581104 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.943694115 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.945209026 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.945233107 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.945477962 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.946321011 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:12.951380968 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:12.991333961 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.037081003 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.037147999 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.037374973 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.055175066 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.055212021 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.061345100 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.061395884 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.061522007 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.061984062 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.062004089 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.076653004 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.076828003 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.076903105 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.076998949 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.077020884 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.077039003 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.077048063 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.079936028 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.079973936 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.080108881 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.080285072 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.080302954 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.214167118 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.214272976 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.215905905 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.215914965 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.216268063 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.217158079 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.259358883 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.351749897 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.351841927 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.352152109 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.352221966 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.352252960 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.352267027 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.352273941 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.355401039 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.355463982 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.355561972 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.355783939 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.355798960 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.417157888 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.417766094 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.417794943 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.418243885 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.418251038 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.550142050 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.550338984 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.550395012 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.550396919 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.550544977 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.550661087 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.550678015 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.550688982 CET	49823	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.550693989 CET	443	49823	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.553791046 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.553833008 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.554033995 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.554141998 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.554152966 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.814505100 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.815200090 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.815233946 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.815675020 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.815680981 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.878845930 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.879609108 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.879631042 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.880217075 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.880223036 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.951139927 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.951230049 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.951500893 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.951582909 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.951602936 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.951615095 CET	49824	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.951621056 CET	443	49824	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.954910994 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.954941034 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:13.955029964 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.955195904 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:13.955200911 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.016994953 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.017034054 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.017086029 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.017149925 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.017191887 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.017493963 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.017512083 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.017523050 CET	49825	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.017528057 CET	443	49825	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.021018982 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.021051884 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.021150112 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.021364927 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.021383047 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.089585066 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.090142965 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.090169907 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.090619087 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.090631008 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.220840931 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.220994949 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.221155882 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.221204042 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.221224070 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.221265078 CET	49826	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.221270084 CET	443	49826	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.224412918 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.224447966 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.225491047 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.225672007 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.225684881 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.291107893 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.291785955 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.291795015 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.292397022 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.292401075 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.368818045 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.369360924 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.369400978 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.369817972 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.369824886 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.420269012 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.420356035 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.420443058 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.420721054 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.420738935 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.420749903 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.420756102 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.423851013 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.423897982 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.423985004 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.424202919 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.424221039 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.500988960 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.501138926 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.501364946 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.501403093 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.501425028 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.501437902 CET	49822	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.501444101 CET	443	49822	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.504791021 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.504839897 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.504940987 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.505170107 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.505189896 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.701323032 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.701987982 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.702008963 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.702452898 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.702456951 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.742501974 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.743100882 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.743132114 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.743566036 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.743577957 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.837924957 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.837997913 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.838138103 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.838387012 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.838387012 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.838403940 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.838418007 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.841722012 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.841753960 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.841849089 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.842057943 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.842071056 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.875551939 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.875575066 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.875618935 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.875653028 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.875700951 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.875929117 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.875946999 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.875955105 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.875962019 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.878730059 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.878756046 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.878849030 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.879024029 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.879034996 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.961698055 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.962524891 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.962543011 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:14.963500977 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:14.963506937 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.090504885 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.090567112 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.090635061 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.090960979 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.090960979 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.090976954 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.090986967 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.095415115 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.095455885 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.095526934 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.095684052 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.095700026 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.160624981 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.161825895 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.161838055 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.162612915 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.162617922 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.251362085 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.252038002 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.252111912 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.252489090 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.252502918 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.295512915 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.295591116 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.295869112 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.295952082 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.295967102 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.295979023 CET	49831	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.295984030 CET	443	49831	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.299405098 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.299441099 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.299516916 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.299720049 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.299736023 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.381670952 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.381899118 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.382189989 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.382292032 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.382292986 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.382333040 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.382359982 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.385442019 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.385492086 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.385593891 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.385781050 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.385802031 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.586905003 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.587661982 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.587723017 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.588267088 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.588288069 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.612209082 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.612910986 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.612961054 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.613526106 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.613533020 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.720556021 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.720588923 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.720643044 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.720658064 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.720725060 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.720936060 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.720984936 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.721019030 CET	49833	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.721035957 CET	443	49833	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.725207090 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.725258112 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.725346088 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.725538969 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.725547075 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.744323969 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.744400024 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.744496107 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.744734049 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.744760036 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.744776011 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.744785070 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.747708082 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.747750044 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.747864008 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.747999907 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.748014927 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.814035892 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.822634935 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.822666883 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:15.823096991 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:15.823101997 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.022197962 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.022244930 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.022296906 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.022370100 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.022370100 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.022627115 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.022644997 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.022680998 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.022686958 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.026381016 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.026403904 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.026480913 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.026634932 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.026644945 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.031589985 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.032111883 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.032170057 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.032890081 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.032902956 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.154344082 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.154874086 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.154901981 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.155322075 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.155330896 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.162806034 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.163243055 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.163439989 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.163486004 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.163510084 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.163522005 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.163527966 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.166079044 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.166130066 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.166194916 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.166322947 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.166335106 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.290374041 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.290442944 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.290735960 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.290793896 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.290815115 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.290827990 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.290832996 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.294044018 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.294095039 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.294188023 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.294389963 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.294404030 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.460769892 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.461260080 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.461282015 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.461733103 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.461744070 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.496172905 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.501925945 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.501960039 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.502851963 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.502860069 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.591645956 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.591710091 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.591761112 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.591964006 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.591979027 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.591989040 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.591995955 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.594444990 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.594490051 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.594568014 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.594718933 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.594731092 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.631562948 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.631589890 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.631642103 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.631656885 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.631696939 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.631839037 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.631856918 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.631869078 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.631874084 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.634334087 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.634358883 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.634429932 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.634610891 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.634618044 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.752027988 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.752623081 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.752667904 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.753058910 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.753067017 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.882114887 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.882189989 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.882253885 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.882455111 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.882476091 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.882488012 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.882494926 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.885416985 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.885473967 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.885569096 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.885741949 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.885755062 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.916083097 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.916512966 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.916547060 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:16.916954994 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:16.916961908 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.041759014 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.042284012 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.042315006 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.042732000 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.042737961 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.049304962 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.049377918 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.049434900 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.049716949 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.049741983 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.049757957 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.049766064 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.052534103 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.052576065 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.052659988 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.052792072 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.052807093 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.175390959 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.175503969 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.175560951 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.175865889 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.175887108 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.175916910 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.175924063 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.179707050 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.179754019 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.179810047 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.180007935 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.180021048 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.350887060 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.351545095 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.351564884 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.352236032 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.352242947 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.375945091 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.376399040 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.376429081 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.376843929 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.376851082 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.487623930 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.487826109 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.487900019 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.487909079 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.487962961 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.488009930 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.488035917 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.488050938 CET	49843	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.488058090 CET	443	49843	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.490844011 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.490883112 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.491103888 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.491277933 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.491295099 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.511748075 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.511825085 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.514327049 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.517482042 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.517503023 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.517517090 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.517523050 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.520678043 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.520715952 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.521055937 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.521253109 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.521272898 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.620925903 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.621546984 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.621593952 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.621989965 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.621995926 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.752897978 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.752986908 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.753282070 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.753361940 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.753391981 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.753405094 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.753411055 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.756520987 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.756545067 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.756664038 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.756803036 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.756819963 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.797620058 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.798286915 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.798329115 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.798697948 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.798705101 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.929935932 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.930712938 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.930752993 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.931282997 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.931288958 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.938070059 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.938338041 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.942342043 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.942572117 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.942590952 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.942620993 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.942626953 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.945404053 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.945441008 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:17.945609093 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.945748091 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:17.945760012 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.061958075 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.062025070 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.062160015 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.062254906 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.062510967 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.062556028 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.062585115 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.062599897 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.065768003 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.065807104 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.065921068 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.066154957 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.066171885 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.222760916 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.223335028 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.223352909 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.223835945 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.223843098 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.255158901 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.255670071 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.255707979 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.256068945 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.256074905 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.365210056 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.365284920 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.365497112 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.365540028 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.365540028 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.365556955 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.365566969 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.368557930 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.368601084 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.368710995 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.368874073 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.368885994 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.385736942 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.386096954 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.386176109 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.386264086 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.386264086 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.386281967 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.386292934 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.388581038 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.388622046 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.388705969 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.388883114 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.388892889 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.493957996 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.503240108 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.503253937 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.522028923 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.522047043 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.647531986 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.647605896 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.647716999 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.652303934 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.652327061 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.652343035 CET	49850	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.652348042 CET	443	49850	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.656239986 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.656270981 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.656421900 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.656963110 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.656976938 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.675162077 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.675775051 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.675789118 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.676438093 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.676443100 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.804361105 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.804960966 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.804975986 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.805408955 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.805414915 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.806155920 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.806217909 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.806269884 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.806309938 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.806354046 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.806432009 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.806452990 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.806458950 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.806464911 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.809189081 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.809226990 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.809420109 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.809510946 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.809525013 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.939080000 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.939157963 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.939369917 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.939632893 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.939646959 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.939659119 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.939663887 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.942941904 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.942960978 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:18.943051100 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.943207026 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:18.943218946 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.110769033 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.111641884 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.111661911 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.112740040 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.112747908 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.133586884 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.134040117 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.134059906 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.134768009 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.134782076 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.245599985 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.245624065 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.245670080 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.245811939 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.245811939 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.270271063 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.270425081 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.270539045 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.368437052 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.368468046 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.368663073 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.368673086 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.376331091 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.376365900 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.376384974 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.376394987 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.390813112 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.443003893 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.477292061 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.477319002 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.477861881 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.477868080 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.484595060 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.484633923 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.484739065 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.484945059 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.484961033 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.487656116 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.487692118 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.487761974 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.489752054 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.489769936 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.748537064 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.748569965 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.748615026 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.748641014 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.748694897 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.748850107 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.748850107 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.748872042 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.748887062 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.751866102 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.751900911 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.751977921 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.752213001 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.752226114 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.757992029 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.758528948 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.758549929 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.758994102 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.759001970 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.761682034 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.761969090 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.761981010 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.762310028 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.762315035 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.808537960 CET	443	49706	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:19.843688011 CET	443	49706	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:19.843844891 CET	49706	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:19.889096022 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.889172077 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.889281988 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.889543056 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.889543056 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.889566898 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.889580965 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.890886068 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.890952110 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.891016960 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.891047955 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.891087055 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.891128063 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.891249895 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.891267061 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.891280890 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.891287088 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.892862082 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.892904043 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.893150091 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.893150091 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.893189907 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.893558979 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.893594027 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:19.893656015 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.893860102 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:19.893872023 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.365993977 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.366528988 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.366564035 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.367139101 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.367150068 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.372402906 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.374602079 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.374624968 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.375118017 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.375125885 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.497180939 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.497208118 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.497262001 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.497394085 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.497428894 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.497716904 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.497716904 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.497739077 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.497744083 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.501173973 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.501214027 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.501395941 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.501544952 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.501559973 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.504450083 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.504519939 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.504587889 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.504699945 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.504723072 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.504745007 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.504755974 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.507149935 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.507183075 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.507262945 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.507477045 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.507484913 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.519207954 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.519836903 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.519864082 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.520272970 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.520279884 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.633630991 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.634298086 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.634331942 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.634844065 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.634849072 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.636194944 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.636497021 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.636532068 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.636820078 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.636826038 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.660290956 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.660346031 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.660504103 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.660790920 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.660814047 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.660826921 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.660832882 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.664125919 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.664166927 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.664479971 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.664479971 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.664511919 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.766015053 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.766093969 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.766340017 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.766475916 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.766475916 CET	49861	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.766494989 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.766505003 CET	443	49861	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.769788980 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.769824028 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.769917011 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.770178080 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.770190001 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.770396948 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.770453930 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.770625114 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.770658970 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.770675898 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.770688057 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.770693064 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.773124933 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.773159027 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:20.773252964 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.773447037 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:20.773458958 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.249466896 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.249623060 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.250122070 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.250144005 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.250179052 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.250205040 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.250711918 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.250713110 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.250719070 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.250722885 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379451036 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379553080 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379573107 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379633904 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379637003 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.379688025 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379728079 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.379728079 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.379975080 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.379992008 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.379992008 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.380008936 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.380023003 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.380028009 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.380045891 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.380053997 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.383025885 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.383124113 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.383136988 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.383214951 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.383245945 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.383341074 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.383399963 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.383419991 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.383488894 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.383513927 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.435362101 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.435825109 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.435853958 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.436278105 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.436284065 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.507749081 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.508016109 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.508163929 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.508183002 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.508317947 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.508342028 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.508614063 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.508619070 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.508783102 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.508788109 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.571185112 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.571213961 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.571259022 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.571260929 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.571307898 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.571624041 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.571641922 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.571655035 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.571660995 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.575238943 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.575278997 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.575340033 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.575836897 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.575853109 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.639235973 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.639359951 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.639432907 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.639499903 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.639534950 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.639585018 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.641377926 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.641401052 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.641412973 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.641419888 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.643659115 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.643673897 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.643683910 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.643688917 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.671752930 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.671807051 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.671869040 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.672748089 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.672763109 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.673192978 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.673226118 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:21.673294067 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.673420906 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:21.673430920 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.130842924 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.131445885 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.131494999 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.131902933 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.131918907 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.132134914 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.132575035 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.132601976 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.133044004 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.133054018 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.281851053 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.281918049 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.281971931 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282160044 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282186031 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.282202005 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282211065 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.282250881 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.282285929 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.282332897 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.282339096 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282377958 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282449007 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282470942 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.282484055 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.282490969 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.285279036 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.285320997 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.285394907 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.285527945 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.285577059 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.285630941 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.285768032 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.285783052 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.285847902 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.285864115 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.322319031 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.328185081 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.328226089 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.328737020 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.328747988 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.447355032 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.447905064 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.447937965 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.448349953 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.448358059 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.455015898 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.455080032 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.455269098 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.455301046 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.455323935 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.455338955 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.455343962 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.458086967 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.458118916 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.458189964 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.458318949 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.458342075 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.460860014 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.461179018 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.461210966 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.461568117 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.461575985 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.579267979 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.579304934 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.579360008 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.579401970 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.579431057 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.579703093 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.579724073 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.579736948 CET	49872	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.579747915 CET	443	49872	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.582449913 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.582494020 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.582612038 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.582851887 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.582870007 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.678185940 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.678281069 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.678478956 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.678514004 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.678531885 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.678541899 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.678548098 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.681516886 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.681581974 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:22.681695938 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.681855917 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:22.681889057 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.027240038 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.030141115 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.030181885 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.030592918 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.030599117 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.050414085 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.050793886 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.050832987 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.051179886 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.051184893 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.155540943 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.155613899 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.155791998 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.155886889 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.155910015 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.155921936 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.155929089 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.158834934 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.158869982 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.159025908 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.159188986 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.159204960 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.183559895 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.183640003 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.183763027 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.183805943 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.183871031 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.183890104 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.183906078 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.183912992 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.184257984 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.184278011 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.184741020 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.184745073 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.186634064 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.186662912 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.186728001 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.186866999 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.186882019 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.312743902 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.312810898 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.312891960 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.313165903 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.313185930 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.313193083 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.313198090 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.313796043 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.316323042 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.316355944 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.316728115 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.316749096 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.316773891 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.316917896 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.316935062 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.317333937 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.317341089 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.412044048 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.412617922 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.412667990 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.413089991 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.413098097 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.444309950 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.444387913 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.444468975 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.444680929 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.444700956 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.444711924 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.444716930 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.447468042 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.447525978 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.447632074 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.447778940 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.447788954 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.542156935 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.542227030 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.542274952 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.542552948 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.542577028 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.542596102 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.542603016 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.545025110 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.545056105 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.545119047 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.545253038 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.545264006 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.923060894 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.923610926 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.923645020 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.924098969 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.924105883 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.935410976 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.935780048 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.935801983 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:23.936264038 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:23.936286926 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.044709921 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.045953035 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.045974016 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.046500921 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.046514034 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.054450035 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.054743052 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.054795027 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.054796934 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.054857016 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.054918051 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.054930925 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.054946899 CET	49879	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.054953098 CET	443	49879	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.057641029 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.057693005 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.057765007 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.057902098 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.057919025 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.074018955 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.074094057 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.074156046 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.074275970 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.074294090 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.074315071 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.074320078 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.076438904 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.076483011 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.076560020 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.076694965 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.076715946 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.184179068 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.184444904 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.184663057 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.184714079 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.184874058 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.184896946 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.185637951 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.185647964 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.186053038 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.186077118 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.186086893 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.186091900 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.189623117 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.189657927 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.189740896 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.189899921 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.189905882 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.267024040 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.267648935 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.267673016 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.268099070 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.268105030 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.315804005 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.315884113 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.316090107 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.316503048 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.316524982 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.316538095 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.316544056 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.319423914 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.319473028 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.319566965 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.319725037 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.319746971 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.397699118 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.397775888 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.397883892 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.398160934 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.398176908 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.398186922 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.398191929 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.401243925 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.401285887 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.401381969 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.401540041 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.401559114 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.796502113 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.798686981 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.798707008 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.799176931 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.799180984 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.822225094 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.823003054 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.823016882 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.823090076 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.823095083 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.922019958 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.922543049 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.922564983 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.922976971 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.922981977 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.928724051 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.928755045 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.928821087 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.928878069 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.928983927 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.929001093 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.929011106 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.929018021 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.931766033 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.931854963 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.931950092 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.932101965 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.932132006 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.955488920 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.956414938 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.956466913 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.956466913 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.956540108 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.956567049 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.956588984 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.956602097 CET	49884	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.956609011 CET	443	49884	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.958638906 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.958669901 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:24.958735943 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.958848000 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:24.958862066 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.053374052 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.053414106 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.053476095 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.053544998 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.053606987 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.056448936 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.063155890 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.063155890 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.063173056 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.063182116 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.064570904 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.064589024 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.065182924 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.065200090 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.066520929 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.066556931 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.066658974 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.066767931 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.066777945 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.172398090 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.172861099 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.172878981 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.173297882 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.173302889 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.194509983 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.194580078 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.194745064 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.194746017 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.194926977 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.194926977 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.194952011 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.194963932 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.197427988 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.197463989 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.197525024 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.197638988 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.197648048 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.310117960 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.310141087 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.310177088 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.310213089 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.310242891 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.310425997 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.310441017 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.310451031 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.310457945 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.312899113 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.312933922 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.313014984 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.313147068 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.313158989 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.664216995 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.664942026 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.664968014 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.665571928 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.665576935 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.730696917 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.731281996 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.731308937 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.731735945 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.731740952 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.794980049 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.795559883 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.795586109 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.796025991 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.796030998 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.800077915 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.800164938 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.800220966 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.800503016 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.800520897 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.800534010 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.800539970 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.804265022 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.804296017 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.804371119 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.804703951 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.804713011 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.869146109 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.869169950 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.869244099 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.869246960 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.869297028 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.869515896 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.869534016 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.869546890 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.869553089 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.872952938 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.872997999 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.873094082 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.873266935 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.873287916 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.925781012 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.925816059 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.925875902 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.925947905 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.925996065 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.926441908 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.926465034 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.926481009 CET	49890	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.926487923 CET	443	49890	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.929773092 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.929863930 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.929972887 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.930156946 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.930186987 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.930906057 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.931273937 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.931297064 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:25.931711912 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:25.931716919 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.046025991 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.046499014 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.046530962 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.047210932 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.047216892 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.063847065 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.063875914 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.063915968 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.063926935 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.063977957 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.064218998 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.064239025 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.064250946 CET	49891	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.064256907 CET	443	49891	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.075320959 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.075362921 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.075431108 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.075701952 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.075712919 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.177619934 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.177719116 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.177779913 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.177954912 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.177972078 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.177982092 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.177988052 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.180876017 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.180927992 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.180994034 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.181133032 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.181147099 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.529952049 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.530508995 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.530587912 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.530963898 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.530983925 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.617033005 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.618150949 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.618175030 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.618558884 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.618563890 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.664516926 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.665468931 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.665489912 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.665857077 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.665862083 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.665918112 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.665987968 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.666079044 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.666217089 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.666235924 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.666253090 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.666260958 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.669574022 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.669610023 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.669713020 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.669889927 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.669904947 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.748822927 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.748943090 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.749027967 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.749056101 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.749070883 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.749078035 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.749083996 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.751174927 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.751230001 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.751306057 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.751460075 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.751475096 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.798007011 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.798146963 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.798206091 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.798252106 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.798285961 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.798510075 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.798510075 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.798537970 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.798561096 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.800894022 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.800932884 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.801044941 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.801156044 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.801172018 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.807193041 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.810668945 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.810698032 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.811103106 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.811109066 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.913835049 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.914391994 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.914421082 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.914850950 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.914855957 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.937688112 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.937792063 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.937956095 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.937990904 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.938010931 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.938041925 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.938050032 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.940654993 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.940697908 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:26.940767050 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.940890074 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:26.940903902 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.044467926 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.044553995 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.044692039 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.044755936 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.044810057 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.044830084 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.044840097 CET	49897	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.044845104 CET	443	49897	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.047274113 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.047302008 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.047394037 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.047558069 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.047570944 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.399604082 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.400115967 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.400129080 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.400569916 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.400574923 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.527836084 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.527939081 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.528227091 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.528265953 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.528281927 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.528295994 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.528301001 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.531166077 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.531275988 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.531570911 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.531570911 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.531657934 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.532095909 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.532435894 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.532464981 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.532891035 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.532900095 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.545188904 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.545696974 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.545715094 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.546102047 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.546107054 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.670099974 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.670234919 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.670294046 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.670336008 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.670377970 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.670531034 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.670557022 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.670569897 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.670574903 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.673592091 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.673615932 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.673697948 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.673865080 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.673875093 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.675436974 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.675790071 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.675812006 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.676223993 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.676229000 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.678360939 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.678419113 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.678584099 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.678585052 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.678628922 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.678646088 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.680613995 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.680649042 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.680711031 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.680829048 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.680843115 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.786919117 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.788949966 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.788968086 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.789402008 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.789408922 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.807885885 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.808038950 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.808114052 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.808191061 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.808192015 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.808228970 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.808254004 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.810528040 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.810559988 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.810621977 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.810733080 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.810751915 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.919193029 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.919373989 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.919451952 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.921772957 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.921799898 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.921911001 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.921922922 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.924583912 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.924609900 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:27.924680948 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.924804926 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:27.924818039 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.260962009 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.262669086 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.262685061 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.263114929 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.263119936 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.391269922 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.391361952 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.391422033 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.391598940 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.391617060 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.391628981 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.391635895 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.394634008 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.394654036 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.394742966 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.394906998 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.394916058 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.403460979 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.403959036 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.403973103 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.404345036 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.404350996 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.423708916 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.424011946 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.424037933 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.424365044 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.424371958 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.533488035 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.533651114 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.533741951 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.533859015 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.533876896 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.536567926 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.538276911 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.538291931 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.539345026 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.539350986 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.539375067 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.539411068 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.539607048 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.539607048 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.539635897 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.558743000 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.559042931 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.559092999 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.559108973 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.559137106 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.559250116 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.559351921 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.559365988 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.559376955 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.559381962 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.562393904 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.562437057 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.562531948 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.562788010 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.562798977 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.659924984 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.660417080 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.660432100 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.660934925 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.660944939 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.667375088 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.667459011 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.667550087 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.667660952 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.667660952 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.667678118 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.667680979 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.671047926 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.671097040 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.671267033 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.672333956 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.672347069 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.791670084 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.791701078 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.791743994 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.791908979 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.791908979 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.792073011 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.792094946 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.792105913 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.792110920 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.794950008 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.794997931 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:28.795098066 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.795257092 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:28.795264959 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.137443066 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.138403893 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.138432026 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.139528990 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.139533997 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.264511108 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.264970064 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.264986992 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.265800953 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.265815020 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.296447992 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.301744938 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.301769018 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.303643942 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.303647995 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.393805981 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.394027948 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.394083023 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.394102097 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.394138098 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.394192934 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.394212008 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.394222021 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.394227028 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.396938086 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.397001982 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.397079945 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.397211075 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.397222042 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.415879965 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.416306973 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.416320086 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.416740894 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.416747093 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.430485010 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.430855036 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.430918932 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.430954933 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.430954933 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.430974007 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.430984020 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.433722019 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.433763981 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.433851004 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.433993101 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.434001923 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.547574043 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.548257113 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.548305035 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.548680067 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.548686028 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.557605982 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.557635069 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.557692051 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.557760000 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.557859898 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.557879925 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.557894945 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.557904005 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.560475111 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.560534000 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.560616970 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.560800076 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.560816050 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.734174967 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:29.734220028 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:29.734297991 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:29.734707117 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:29.734719038 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:29.879807949 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.879904032 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.879939079 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.879966021 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.880050898 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.880377054 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.883044958 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.883060932 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.883071899 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.883078098 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.884531975 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.884558916 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.887779951 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.887825966 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.887960911 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.888860941 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.888967991 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.889041901 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.889058113 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:29.889060020 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.890811920 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:29.890842915 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.134171963 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.134839058 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.134905100 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.135301113 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.135332108 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.207449913 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.208009958 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.208030939 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.208451986 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.208457947 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.267823935 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.267859936 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.267925024 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.267939091 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.268016100 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.268213034 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.268256903 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.268286943 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.268302917 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.271169901 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.271223068 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.271284103 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.271431923 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.271445990 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.295053005 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.295599937 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.295624018 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.296045065 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.296057940 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.346231937 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.346257925 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.346307993 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.346318960 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.346357107 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.346570969 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.346591949 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.346606016 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.346612930 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.349529028 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.349565983 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.349723101 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.349761963 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.349766970 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.428117990 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.428198099 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.428263903 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.428309917 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.428330898 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.428397894 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.428523064 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.428560972 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.428586960 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.428601980 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.431391001 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.431435108 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.431521893 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.431660891 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.431679010 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.639902115 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.640444040 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.640475035 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.640894890 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.640901089 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.644768000 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.645221949 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.645256042 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.645814896 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.645823002 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.777796030 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.778048038 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.778136969 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.778179884 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.778179884 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.778202057 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.778217077 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.781162024 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.781193018 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.781276941 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.781527996 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.781537056 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.830410957 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.830481052 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.830554008 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.830602884 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.830640078 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.830698013 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.830806971 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.830836058 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.830862999 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.830877066 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.833487988 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.833523035 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.833616018 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.833767891 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:30.833785057 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:30.995929003 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:30.996097088 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:30.997446060 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:30.997462034 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:30.997710943 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:30.999125004 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.011765003 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.012098074 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.012134075 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.012500048 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.012506962 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.039365053 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.073487997 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.074076891 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.074105024 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.074479103 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.074484110 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.144620895 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.144711971 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.144787073 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.144994020 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.144994020 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.145015955 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.145029068 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.147748947 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.147793055 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.147876024 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.148001909 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.148016930 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.172447920 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.172911882 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.172935009 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.173352957 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.173361063 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.202900887 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.202933073 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.202974081 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.202981949 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.203048944 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.203267097 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.203286886 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.203300953 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.203305960 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.208014011 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.208050966 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.208120108 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.208256960 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.208277941 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.306054115 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.306153059 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.306204081 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.306354046 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.306379080 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.306394100 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.306401968 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.308845043 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.308896065 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.308975935 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.309107065 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.309118032 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.376408100 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.376442909 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.376460075 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.376552105 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.376580954 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.376597881 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.376626015 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.497889042 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.497952938 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.498056889 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.498136997 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.498147011 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.498287916 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.498331070 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.498356104 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.498511076 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.498545885 CET	443	49916	4.175.87.197	192.168.2.5
Oct 30, 2024 15:58:31.499020100 CET	49916	443	192.168.2.5	4.175.87.197
Oct 30, 2024 15:58:31.528779984 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.529275894 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.529305935 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.529716015 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.529720068 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.566068888 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.570216894 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.570240021 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.570601940 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.570607901 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665540934 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665720940 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665781021 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.665801048 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665879011 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665901899 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.665946960 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.665946960 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.665960073 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665976048 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.665990114 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.668576956 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.668620110 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.668708086 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.668833971 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.668849945 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.703336000 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.703486919 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.703555107 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.703610897 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.703629971 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.703639984 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.703645945 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.706032038 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.706094980 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.706310034 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.706437111 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.706463099 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.878293991 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.878890991 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.878906965 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.879345894 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.879350901 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.949119091 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.951113939 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.951133966 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:31.951677084 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:31.951682091 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.008841038 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.008877039 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.008938074 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.008953094 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.008989096 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.009223938 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.009241104 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.009253025 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.009258032 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.012165070 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.012245893 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.012350082 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.012567997 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.012594938 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.083863020 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.083952904 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.084163904 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.084202051 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.084220886 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.084235907 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.084242105 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.087191105 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.087548971 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.087569952 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.088036060 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.088040113 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.093902111 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.094021082 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.094106913 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.094244957 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.094276905 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.224916935 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.225089073 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.225194931 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.225296974 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.225311041 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.225347996 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.225353003 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.227828979 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.227936029 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.228095055 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.228257895 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.228292942 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.403620005 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.404180050 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.404198885 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.404661894 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.404668093 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.439497948 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.440037012 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.440063000 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.440536976 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.440546036 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.537329912 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.537367105 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.537427902 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.537467003 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.537516117 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.537709951 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.537709951 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.537725925 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.537735939 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.540782928 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.540828943 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.540899992 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.541032076 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.541045904 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.605407000 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.609961033 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.610043049 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.610083103 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.610083103 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.610101938 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.610117912 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.612835884 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.612943888 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.613043070 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.613210917 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.613250017 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.741426945 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.742022991 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.742044926 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.742489100 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.742497921 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.832607031 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.833192110 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.833211899 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.833616972 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.833621979 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.869882107 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.869952917 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.870160103 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.870187998 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.870203972 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.870218039 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.870223999 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.872894049 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.872929096 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.872997999 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.873121977 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.873136044 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.966244936 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.966279030 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.966335058 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.966411114 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.966440916 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.966645002 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.966681004 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.966692924 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.966698885 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.969140053 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.969185114 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.969259024 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.969387054 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.969403028 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.976706028 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.983961105 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.983973026 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:32.984451056 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:32.984455109 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.112912893 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.113096952 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.113169909 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.113251925 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.113251925 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.113291025 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.113316059 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.116478920 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.116528988 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.116600990 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.116785049 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.116812944 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.295559883 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.296061039 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.296113014 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.296542883 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.296550035 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.335443020 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.335992098 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.336019993 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.336483955 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.336488962 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.433636904 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.433712006 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.433820963 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.433921099 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.434020042 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.434043884 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.434058905 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.434066057 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.437359095 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.437444925 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.437546968 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.437701941 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.437722921 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.465775967 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.465851068 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.465992928 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.466017962 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.466032982 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.466080904 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.466092110 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.468075037 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.468159914 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.468246937 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.468374014 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.468394995 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.619666100 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.620291948 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.620337963 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.620743990 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.620758057 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.707309008 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.707869053 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.707887888 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.708483934 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.708489895 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.751516104 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.751822948 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.751883984 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.752100945 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.752118111 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.752129078 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.752135038 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.755225897 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.755306005 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.755383968 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.755537033 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.755569935 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.836462975 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.836563110 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.836689949 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.836749077 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.836767912 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.836810112 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.836826086 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.836836100 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.836839914 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.839791059 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.839817047 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.839905024 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.840058088 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.840076923 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.857134104 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.857572079 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.857647896 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.858140945 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.858155966 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.987946033 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.988050938 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.988327980 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.988411903 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.988413095 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.988457918 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.988487959 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.995389938 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.995467901 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:33.995598078 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.995759010 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:33.995791912 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.392479897 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.392654896 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.393512964 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.393513918 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.393528938 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.393539906 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.394001961 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.394007921 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.394218922 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.394223928 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.521109104 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.521663904 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.521691084 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.522257090 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.522262096 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.526521921 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.526546001 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.526590109 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.526597023 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.526628971 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.526871920 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.526890993 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.526905060 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.526911020 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.529423952 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.529483080 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.529531956 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.529679060 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.529686928 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.529700041 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.529705048 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.529881001 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.529915094 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.529989004 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.530152082 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.530167103 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.532129049 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.532217979 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.532310009 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.532445908 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.532481909 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.563550949 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.564340115 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.564351082 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.564904928 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.564908981 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.659373999 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.659432888 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.659575939 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.659852982 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.659874916 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.659885883 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.659893036 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.662642956 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.662666082 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.662744045 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.662893057 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.662904978 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.693257093 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.693295002 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.693342924 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.693367004 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.693403959 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.693577051 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.693592072 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.693600893 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.693607092 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.695744991 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.695818901 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.695878983 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.696001053 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.696019888 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.752880096 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.753441095 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.753463030 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.754026890 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.754031897 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.884392023 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.884476900 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.884603977 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.884720087 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.884747982 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.884759903 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.884766102 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.887914896 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.887948036 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:34.888144970 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.888324976 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:34.888339996 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.254215002 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.254734993 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.254766941 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.255302906 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.255310059 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.282538891 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.283149004 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.283179998 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.283715010 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.283721924 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.387053013 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.387152910 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.387222052 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.391597986 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.391628027 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.391639948 CET	49943	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.391649961 CET	443	49943	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.394830942 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.394896030 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.394961119 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.396403074 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.396424055 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.399806976 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.400144100 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.400156975 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.400580883 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.400585890 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.427683115 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.427753925 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.427814007 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.427961111 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.427979946 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.428002119 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.428009033 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.429438114 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.430172920 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.430197954 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.430274963 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.430464983 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.430490017 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.430879116 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.430886984 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.431011915 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.431025028 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.531059027 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.531374931 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.531426907 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.531435966 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.531496048 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.531548977 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.531569004 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.531594992 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.531600952 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.534477949 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.534531116 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.534758091 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.534758091 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.534792900 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.559360981 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.559433937 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.559504032 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.559664965 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.559685946 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.559726000 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.559732914 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.562500000 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.562531948 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.562681913 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.562845945 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.562858105 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.626456022 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.626832008 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.626842976 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.627264023 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.627269030 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.756409883 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.756479979 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.756526947 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.756551027 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.756582975 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.756643057 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.760972023 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.760989904 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.761001110 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.761008024 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.777093887 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.777132988 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:35.777199030 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.777579069 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:35.777591944 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.125941038 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.167309999 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.169265032 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.169295073 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.169791937 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.169800997 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.207705975 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.294491053 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.294589043 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.294641018 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.296747923 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.320804119 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.348215103 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.363852024 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.524349928 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.569077969 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.749629974 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.749658108 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.750343084 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.750348091 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.750662088 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.750674009 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.751219988 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.751225948 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.751734018 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.751754045 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.752350092 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.752355099 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.769895077 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.769922972 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.769937992 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.769944906 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.777896881 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.777913094 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.778557062 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.778563023 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.876781940 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.876959085 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.876971960 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.876992941 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.877043009 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.877070904 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.877074003 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.877120018 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.878890991 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.878968000 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.879019976 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:36.905071974 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.905141115 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:36.905232906 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.021142960 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.021178007 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.021193981 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.021200895 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.038589954 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.038589954 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.038614035 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.038625956 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.039414883 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.039421082 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.039470911 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.039477110 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.041572094 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.041583061 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.041591883 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.041595936 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.051207066 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.051301956 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.051402092 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.101445913 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.101485968 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.124810934 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.124862909 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.124950886 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.132216930 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.132256985 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.132328987 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.151626110 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.151662111 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.171736002 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.171770096 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.171833992 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.172028065 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.172039032 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.183042049 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.183062077 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.184595108 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.184606075 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.184689045 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.184843063 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.184853077 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.853790998 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.854715109 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.854796886 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.855170965 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.855186939 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.892838001 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.893820047 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.893851042 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.894941092 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.894948006 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.908431053 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.910805941 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.910830021 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.911343098 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.911349058 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.913142920 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.913512945 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.913563013 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.913980961 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.913988113 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.931305885 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.931934118 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.931955099 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.932363987 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.932369947 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.984128952 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.984154940 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.984209061 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.984219074 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.984291077 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.984493017 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.984539986 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.984569073 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.984584093 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.987386942 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.987435102 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:37.987500906 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.987633944 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:37.987652063 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.022988081 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.023050070 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.023217916 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.023240089 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.023253918 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.023262978 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.023268938 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.025540113 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.025593996 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.025681019 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.025791883 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.025810957 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.042689085 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.042871952 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.042882919 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.042968988 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.042989016 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.043034077 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.043098927 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.043118000 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.043128967 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.043133974 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.043157101 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.043174982 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.045234919 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.045280933 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.045347929 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.045356035 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.045377970 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.045486927 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.045502901 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.045538902 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.045595884 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.045610905 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.060504913 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.060590982 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.060697079 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.060740948 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.060750961 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.060760975 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.060765028 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.062762976 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.062799931 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.062896967 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.063004017 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.063018084 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.641864061 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:38.641891003 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:38.641958952 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:38.642333984 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:38.642365932 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:38.642522097 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:38.642756939 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:38.642771959 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:38.642988920 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:38.643002987 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:38.740582943 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.741101980 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.741131067 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.741559029 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.741569996 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.759826899 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.760296106 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.760308027 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.760736942 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.760742903 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.769052029 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.769320965 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.769330978 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.769654036 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.769659996 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.778759003 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.781233072 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.781248093 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.781658888 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.781663895 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.794912100 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.797437906 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.797451973 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.797789097 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.797795057 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.896346092 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.896461010 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.896677017 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.896723032 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.896845102 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.896866083 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.896883011 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.896889925 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.897023916 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.897061110 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.897216082 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.898114920 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.898121119 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.898829937 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.898837090 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.900665045 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.900732040 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.900800943 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.901375055 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.901386023 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.901599884 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.901619911 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.901729107 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.901774883 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.901788950 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.908703089 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.908780098 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.908858061 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.910774946 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.910799026 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.910815001 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.910820961 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.915604115 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.915682077 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.915770054 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.925535917 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.926327944 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.926891088 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.928658009 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.928689957 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.928755045 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.928925037 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.928925037 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.928944111 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.928947926 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.929857016 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.929869890 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.930069923 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.930079937 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.930088997 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.930093050 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.932363987 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.932384968 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.932532072 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.932792902 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.932805061 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.933235884 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.933254004 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:38.937124968 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.937328100 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:38.937341928 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.303343058 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.304692030 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.304730892 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.305843115 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.305911064 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.312259912 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.319720984 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.319855928 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.320187092 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.320214987 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.323813915 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.323851109 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.323869944 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.323946953 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.334477901 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.334676027 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.364573002 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.379923105 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.379935980 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.426338911 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.581696987 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.581794977 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.581866980 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.586937904 CET	49966	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:58:39.586958885 CET	443	49966	3.93.255.10	192.168.2.5
Oct 30, 2024 15:58:39.641114950 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.645529985 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.645556927 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.646008968 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.646015882 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.648874998 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:39.648915052 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:39.649014950 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:39.649185896 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:39.649272919 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:39.649368048 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:39.649430990 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:39.649444103 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:39.649647951 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:39.649686098 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:39.651818037 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.652920961 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.652955055 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.653383017 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.653394938 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.663165092 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.665241003 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.665261984 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.665671110 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.665676117 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.677601099 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.682632923 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.682646990 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.683033943 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.683038950 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.710316896 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.713228941 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.713299990 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.713795900 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.713803053 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.772751093 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.772777081 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.772831917 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.772876024 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.772907972 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.773140907 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.773164034 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.773176908 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.773184061 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.775849104 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.775886059 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.775988102 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.776096106 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.776108980 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791327953 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791539907 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791621923 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.791661024 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.791661024 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.791681051 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791692019 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791708946 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791778088 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791898966 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.791965008 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.791999102 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.792013884 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.792022943 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.792027950 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.794316053 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.794354916 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.794404030 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.794430017 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.794487000 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.794552088 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.794555902 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.794567108 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.794734955 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.794770956 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.810216904 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.810300112 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.810566902 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.810633898 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.810640097 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.810651064 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.810655117 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.812854052 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.812864065 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.812967062 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.813144922 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.813154936 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.885934114 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.886295080 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.886367083 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.895355940 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.895380974 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.895420074 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.895427942 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.902829885 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.902867079 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:39.903490067 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.903691053 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:39.903701067 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.475182056 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.475522041 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.475548029 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.476679087 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.476757050 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.477515936 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.477888107 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.477981091 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.478111029 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.478132010 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.478234053 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.478243113 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.479228020 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.479341030 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.479770899 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.479832888 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.518959999 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.533607960 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.534547091 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.534575939 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.535024881 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.535037041 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.535554886 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.535573006 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:40.541527987 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.541934967 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.541968107 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.542376995 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.542387962 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.546988964 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.547475100 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.547498941 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.547907114 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.547914028 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.555800915 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.576858044 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:40.578612089 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.578656912 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.579560041 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.579567909 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.646033049 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.647053003 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.647089005 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.651614904 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.651633024 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.665817976 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.665903091 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.665958881 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.666608095 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.666629076 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.666640043 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.666646957 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.672502041 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.672571898 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.672699928 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.672756910 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.674293995 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.674341917 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.674407005 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.674818039 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.674833059 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.678037882 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.678060055 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.678080082 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.678085089 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.685734034 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.685939074 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.685991049 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.689433098 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.689476967 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.689547062 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.689881086 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.689881086 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.689908028 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.689924002 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.698689938 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.698729992 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.704649925 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.704709053 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.704983950 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.705869913 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.705890894 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.719137907 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.719211102 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.719274044 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.719476938 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.719500065 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.719513893 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.719518900 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.725522041 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.725583076 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.725672007 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.725905895 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.725924015 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.786533117 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.786613941 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.786688089 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.786721945 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.786813021 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.786864042 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.786890984 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.786902905 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.786910057 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.789443016 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.789491892 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.789571047 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.789711952 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:40.789730072 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:40.901935101 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:40.901988029 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:40.902162075 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:40.902549028 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:40.902570963 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:41.419529915 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.420641899 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.420686960 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.421272993 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.421283960 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.434209108 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.434956074 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.434989929 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.435740948 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.435749054 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.466005087 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.469505072 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.497984886 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.498024940 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.508292913 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.512242079 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.550493956 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.559746981 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.560502052 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.560589075 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.580931902 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.580964088 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.581037045 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.581070900 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.581119061 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.677086115 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.677119970 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.703203917 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.703205109 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.703242064 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.703259945 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.703332901 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.703370094 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.703402996 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.703411102 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.744029045 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.744061947 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.744621992 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.744633913 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.747365952 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.747384071 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.747777939 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.747782946 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.779889107 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:41.791300058 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:41.791336060 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:41.792665958 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:41.792737007 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:41.795432091 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.795479059 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.795562029 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.796741962 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:41.796813965 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:41.798439026 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.798487902 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.798597097 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.803354979 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.803369045 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.803559065 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.803574085 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.804524899 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.804547071 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.804594040 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.804624081 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.804830074 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.804888964 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.804898977 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.804929018 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.804934025 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.811443090 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.811532021 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.811611891 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.811813116 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.811825991 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.849473000 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:41.849490881 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:41.871841908 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.871874094 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.871934891 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.871934891 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.871997118 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.873636007 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.873655081 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.873713970 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.873744965 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.873778105 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.880743027 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.880760908 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.880774975 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.880779982 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.883332014 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.883337975 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.883358955 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.883362055 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.895481110 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:41.899907112 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.899956942 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.900059938 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.903696060 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.903723001 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.918843985 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.918862104 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:41.918962955 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.919135094 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:41.919145107 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.366951942 CET	49703	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:42.367013931 CET	443	49703	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:42.367752075 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:42.367785931 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:42.368093014 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:42.368434906 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:42.368446112 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:42.531848907 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.532821894 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.532864094 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.533313990 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.533318996 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.548676968 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.550947905 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.550971985 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.551693916 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.551698923 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.565110922 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.565562010 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.565592051 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.565978050 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.565984011 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891637087 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891699076 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891767979 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.891812086 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891824007 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891902924 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891920090 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.891992092 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.891994953 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.892373085 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.892398119 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.892414093 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.892420053 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.892844915 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.894237995 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.894481897 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.894551992 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.895435095 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.895446062 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.896073103 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.896110058 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.896796942 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.896812916 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.896944046 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.896955967 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.896964073 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.896970034 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.897788048 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.897810936 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.897825003 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.897830963 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.899784088 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.899822950 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.899952888 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.900535107 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.900572062 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.900625944 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.900769949 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.900784016 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.900969982 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.900985003 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.901010036 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.901021004 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:42.901143074 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.901228905 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:42.901247025 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.027682066 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.027785063 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.027863979 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.028065920 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.028084993 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.028096914 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.028103113 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029011965 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029035091 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029107094 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.029135942 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029175043 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.029213905 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029259920 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029295921 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.029470921 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.029486895 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.029498100 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.029503107 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.032428026 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.032459021 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.032527924 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.033936977 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.034035921 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.034045935 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.034084082 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.034183025 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.034323931 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.034339905 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.034425020 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.034439087 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.065217018 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.065229893 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.066195965 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.066260099 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.066818953 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.066876888 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.066958904 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.066965103 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.277934074 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.278029919 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.278461933 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.278517962 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.278608084 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:58:43.278659105 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:58:43.632256985 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.632816076 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.632850885 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.633373022 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.633382082 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.636188984 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.636590004 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.636661053 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.636970043 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.636982918 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.641927004 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.642419100 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.642442942 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.642803907 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.642811060 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.767915010 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.768532038 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.768558979 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.769005060 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.769011021 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772155046 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772180080 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772253990 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.772264957 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772353888 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772407055 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.772428989 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772442102 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.772450924 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.772470951 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.772474051 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.774667025 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.774701118 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.774750948 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.774812937 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.774879932 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.774967909 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.774967909 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.774996042 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.775006056 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.775649071 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.775687933 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.776206017 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.776355982 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.776370049 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.777053118 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.777091980 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.777286053 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.777435064 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.777453899 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.783832073 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.786938906 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.786962032 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.787339926 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.787347078 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.873228073 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.873253107 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.873272896 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.873325109 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.873344898 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.873440027 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.882544041 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.882603884 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.882674932 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.882674932 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.882744074 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.882762909 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.882774115 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.882780075 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.885432959 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.885485888 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.885606050 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.885710001 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.885725021 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.901031971 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.901057005 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.901110888 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.901118040 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.901292086 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.901323080 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.901334047 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.901365042 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.901369095 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.903929949 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.903950930 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:43.904022932 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.904247046 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:43.904257059 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.028043032 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.028073072 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.028107882 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.028136969 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.028152943 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.028166056 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.028209925 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.037942886 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.037997961 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.038017988 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.038018942 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.038077116 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.038157940 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.038192987 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.038208961 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.040821075 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.040863037 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.041131020 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.041291952 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.041306019 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.506376028 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.506964922 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.506997108 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.507333994 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.507340908 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.515654087 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.516150951 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.516172886 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.516594887 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.516599894 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.613842964 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.614322901 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.614353895 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.614790916 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.614799023 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.637204885 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.637229919 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.637288094 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.637290001 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.637351990 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.637485027 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.637485027 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.637505054 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.637518883 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.650681019 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.650719881 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.650841951 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.651563883 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.651576996 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.652028084 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.652090073 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.652154922 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.652349949 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.652374029 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.665919065 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.665968895 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.666064024 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.666662931 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.666681051 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.675167084 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.677103996 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.677119970 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.677840948 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.677845001 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.690038919 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.690059900 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.690093994 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.690118074 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.690134048 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.690150023 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.690156937 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.690176964 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.690200090 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.692266941 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.692285061 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.692337036 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.692348003 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.692441940 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.744398117 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.744473934 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.744623899 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.754491091 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.754523039 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.754539013 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.754548073 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.763705969 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.763745070 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.764375925 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.764549017 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.764590025 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.764636040 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.765153885 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.765167952 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.765336990 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.773221016 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.773232937 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.773360968 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.775201082 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.775228977 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.775290966 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.775893927 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.776774883 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.776802063 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.777039051 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.777049065 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.777097940 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.777384996 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.777399063 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.778714895 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:44.778745890 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:44.778808117 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:44.779061079 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.779073000 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.779578924 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.779592037 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.779997110 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:44.780009985 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:44.780503035 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.780503035 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:44.780535936 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.780554056 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:44.780607939 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:44.781116009 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:44.781131029 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:44.781230927 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.781235933 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.786170006 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:44.786195040 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:44.786257982 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:44.786817074 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:44.786818027 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:44.786830902 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:44.786837101 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:44.786902905 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:44.787144899 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:44.787158012 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:44.806235075 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.806265116 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.806308985 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.806327105 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.806354046 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.806372881 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.807637930 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807653904 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807713032 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.807718039 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807749987 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807754993 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.807758093 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807790041 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.807794094 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807813883 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.807858944 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.808895111 CET	49974	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.808907032 CET	443	49974	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.809181929 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.809220076 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.809277058 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.811650991 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:44.811687946 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.812104940 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.812354088 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.812398911 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.821336985 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.821336985 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.821345091 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.821352959 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.823335886 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:44.828321934 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.828355074 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.828449965 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.830837965 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.830863953 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.907928944 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.907987118 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.908070087 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.910286903 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.910286903 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.910303116 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.910314083 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.912623882 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.912676096 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.912756920 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.912934065 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.912950993 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.991450071 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.991492987 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:44.991569042 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.991924047 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:44.991942883 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.338944912 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.338964939 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.339021921 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.339029074 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.339076042 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.339127064 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.340055943 CET	49973	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.340065956 CET	443	49973	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.340610027 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.340692997 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.340939999 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.341303110 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.341341972 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.382044077 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.388071060 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.388137102 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.388560057 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.388571978 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.410386086 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.410973072 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.410995007 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.411487103 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.411534071 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.411539078 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.411696911 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.411714077 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.413031101 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.413106918 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.413116932 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.413163900 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.414088964 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.414154053 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.414252043 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.414258957 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.421200037 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.421399117 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.421412945 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.422449112 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.422557116 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.423847914 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.423933029 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.424108028 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.424119949 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.437187910 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.437427044 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.437437057 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.438046932 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.438416958 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.438514948 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.438549042 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.449140072 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.449352026 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.449390888 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.453023911 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.453102112 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.453465939 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.453591108 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.453603029 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.453653097 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.455878973 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.456142902 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.456151962 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.456976891 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.457173109 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.457325935 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.457326889 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.457345009 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.457496881 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.457556963 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.457596064 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.457619905 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.457674026 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.458209991 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.458261967 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.458494902 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.468300104 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.468538046 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.468549013 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.469610929 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.469705105 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.469712973 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.469881058 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.470809937 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.470871925 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.471010923 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.471484900 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.471492052 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.479332924 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.486569881 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.499372005 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.501137972 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.501847029 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.501861095 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.501899004 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.501909018 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.502655983 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.502680063 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.503329039 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.503766060 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.503839970 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.504482031 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.504544973 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.504878998 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.504885912 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.508584023 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.508867025 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.508883953 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.509931087 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.510019064 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.511158943 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.511229992 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.511575937 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.511584044 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.514863968 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.514955044 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.515002966 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.515008926 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.515099049 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.515189886 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.515203953 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.515240908 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.515245914 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.517476082 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.535593033 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.536293983 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.536319971 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.536978960 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.536986113 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.544960976 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.545013905 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.545301914 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.545367956 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.545367956 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.545386076 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.545389891 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.548208952 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.548224926 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.548233032 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.563627005 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.570204973 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.570643902 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.570664883 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.571086884 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.571095943 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.577753067 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577795029 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577824116 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577852011 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577874899 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577883959 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.577893972 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577933073 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577958107 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.577966928 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.577985048 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.578006029 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.578006029 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.578012943 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.578058958 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.583760023 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.588970900 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.589035988 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.589061975 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.589119911 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.589133024 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.589147091 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.589303970 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.590017080 CET	50012	443	192.168.2.5	104.18.90.62
Oct 30, 2024 15:58:45.590029001 CET	443	50012	104.18.90.62	192.168.2.5
Oct 30, 2024 15:58:45.601691961 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.601749897 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.601787090 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.601841927 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.601857901 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.601931095 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.601953983 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.602021933 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.602632046 CET	50005	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.602649927 CET	443	50005	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.609028101 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:45.609059095 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:45.609150887 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:45.609355927 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:45.609365940 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:45.626391888 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.634356022 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.634434938 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.634488106 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.634673119 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.634995937 CET	50013	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.635010004 CET	443	50013	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.636118889 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.636188984 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.636271954 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.636516094 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.636683941 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.636862040 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.637449980 CET	50004	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.637465954 CET	443	50004	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.638675928 CET	50008	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.638701916 CET	443	50008	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.645484924 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.646029949 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.646131992 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.646142006 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.646190882 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.646239996 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.646522045 CET	50011	443	192.168.2.5	52.216.77.118
Oct 30, 2024 15:58:45.646534920 CET	443	50011	52.216.77.118	192.168.2.5
Oct 30, 2024 15:58:45.649719954 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.649744034 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.649842024 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.650010109 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:45.650024891 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:45.661123991 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.662631035 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.662689924 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.663081884 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.663096905 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.672210932 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.672270060 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.672483921 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.672523975 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.672523975 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.672533989 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.672544956 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.689697981 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.689764977 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.689977884 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.692339897 CET	50014	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.692353964 CET	443	50014	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.701092005 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.701220989 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.701245070 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.701483965 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.701495886 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.701638937 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.701899052 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.702122927 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.702151060 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.702184916 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.702192068 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.702236891 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.702866077 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.702928066 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.703177929 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.703183889 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.703747034 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.703793049 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.703809023 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.703814983 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.703912020 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.703917027 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.704520941 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.704633951 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.704673052 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.704699039 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.704761028 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.704768896 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.704813957 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.705260038 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.705315113 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.705329895 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.705336094 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.705341101 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.738118887 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.738205910 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.741801023 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.741810083 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.742191076 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.743506908 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.745326042 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745349884 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745357990 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745408058 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745445967 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.745470047 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745500088 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745527029 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.745541096 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.745579958 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.745579958 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.747215033 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.747232914 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.747308969 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.747323036 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.754261017 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.754268885 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.787337065 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.794884920 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.795129061 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.795207977 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.795281887 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.795281887 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:45.795334101 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.795361042 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:45.800015926 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.800137043 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.824547052 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824595928 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824671984 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.824681997 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824733019 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824762106 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824784040 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824796915 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.824801922 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.824862003 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.825136900 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.825164080 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.825186968 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.825193882 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.825237989 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.825371981 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.825901031 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.825969934 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.825975895 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.826076984 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.826144934 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.826298952 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.826303959 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.826397896 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.826898098 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.826972961 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.827241898 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.827342987 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.827760935 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.827897072 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.828003883 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.828094959 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.828713894 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.828789949 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.828874111 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.828980923 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.829596996 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.829706907 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.829833031 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.829909086 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.864572048 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.864583969 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.864660978 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.864670038 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.864705086 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.864734888 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.864748001 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.864748955 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.864800930 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.865521908 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.865539074 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.865622997 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.865629911 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.865829945 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.866636992 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.866652012 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.866724014 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.866730928 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.867400885 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.867964983 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.867980003 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.868067026 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.868074894 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.868134975 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.947993994 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.948092937 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.948105097 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.948178053 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.948442936 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.948532104 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.948816061 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.948878050 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.949065924 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.949151993 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.949234009 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.949327946 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.949388981 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.978769064 CET	50009	443	192.168.2.5	104.17.24.14
Oct 30, 2024 15:58:45.978795052 CET	443	50009	104.17.24.14	192.168.2.5
Oct 30, 2024 15:58:45.984146118 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.984169006 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.984260082 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.984270096 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.984319925 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.985143900 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.985160112 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.985223055 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.985229969 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.985337973 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.986154079 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.986171007 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.986207008 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.986212015 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.986257076 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.986257076 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.986876965 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.986891985 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.986934900 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.986941099 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.986979961 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.986979961 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.989208937 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.989224911 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.989291906 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.989299059 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.989347935 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.990158081 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.990173101 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.990267992 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.990267992 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.990274906 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.990312099 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.991055012 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.991070032 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.991127968 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:45.991141081 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:45.991193056 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.016020060 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.016546011 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.016580105 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.017761946 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.017842054 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.018244982 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.018317938 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.018563032 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.018579006 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.066088915 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.103496075 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.103517056 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.103622913 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.103655100 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.104551077 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.104624987 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.104644060 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.104676008 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.104682922 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.104710102 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.104744911 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.105735064 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.105750084 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.105807066 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.105813980 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.105844021 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.105858088 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.106456041 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.106471062 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.106548071 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.106554031 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.107431889 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.107451916 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.107502937 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.107510090 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.107538939 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.107569933 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.108408928 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.108423948 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.108479977 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.108486891 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.108531952 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.109324932 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.109344006 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.109407902 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.109421015 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.109441996 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.109466076 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.110275984 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.110292912 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.110359907 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.110367060 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.110402107 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.111116886 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.111131907 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.111185074 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.111191034 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.111221075 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.111239910 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.111959934 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.111974955 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.112031937 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.112037897 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.112418890 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.112468958 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.112476110 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.112515926 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.113343954 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.205085993 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.205192089 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.206393003 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.221649885 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.255719900 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.277251959 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.299745083 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.306972980 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.325720072 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.325727940 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.326956034 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.326972008 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.327028036 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.327034950 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.328605890 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.328753948 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.328763008 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.329857111 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.329927921 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.340714931 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.340787888 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.342628002 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.342689991 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.342761040 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.342766047 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.342864990 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.342874050 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.351418018 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.351445913 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.351475000 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.351527929 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.351551056 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.351602077 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.351602077 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.368292093 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.368329048 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.368417978 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.368429899 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.368441105 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.368542910 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.368855953 CET	50018	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.368896008 CET	443	50018	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.370712042 CET	50007	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.370739937 CET	443	50007	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.395833015 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.396039009 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.414870977 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.414896965 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.415096998 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.415375948 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:46.415390968 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:46.461405993 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:46.461440086 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:46.461894035 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:46.462244987 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:46.462258101 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:46.468780994 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.469156981 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.469223976 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.469250917 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.469319105 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.469460011 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.469489098 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.469532013 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.469552040 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.469577074 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.469599009 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.471445084 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.471467018 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.471591949 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.471600056 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.471885920 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.472589970 CET	50020	443	192.168.2.5	199.232.192.193
Oct 30, 2024 15:58:46.472609043 CET	443	50020	199.232.192.193	192.168.2.5
Oct 30, 2024 15:58:46.486695051 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.486721039 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.486769915 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.486778975 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.486823082 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.488480091 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.488502026 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.488579988 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.488588095 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.488679886 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.497437000 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.497528076 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.497560978 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.497616053 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.497629881 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.497641087 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.497679949 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.499183893 CET	50019	443	192.168.2.5	104.18.91.62
Oct 30, 2024 15:58:46.499196053 CET	443	50019	104.18.91.62	192.168.2.5
Oct 30, 2024 15:58:46.587471962 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.587502003 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.587621927 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.587621927 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.587636948 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.587805986 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.588438034 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.588460922 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.588516951 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.588525057 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.588541031 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.588701963 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.603276014 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.603321075 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.603364944 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.603373051 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.603399992 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.603420973 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.604139090 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.604159117 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.604264021 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.604271889 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.604342937 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.605003119 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.605024099 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.605067968 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.605073929 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.605122089 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.605122089 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.606144905 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.606178999 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.606209040 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.606215954 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.606273890 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.606273890 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.607115984 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.607140064 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.607273102 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.607273102 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.607285023 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.607332945 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.705140114 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.705166101 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.705280066 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.705280066 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.705291986 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.705404997 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.705826998 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.705849886 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.705888033 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.705895901 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.705957890 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.705957890 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.706542015 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.706564903 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.706753969 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.706760883 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.706830025 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.710135937 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.710160971 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.710225105 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.710232019 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.710309982 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.710309982 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.710906029 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.710927010 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.710968971 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.710975885 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.710999012 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.711033106 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.721110106 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.721131086 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.721224070 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.721235037 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.721626997 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.722100019 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.722121954 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.722160101 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.722167969 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.722212076 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.722212076 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.722546101 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.722567081 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.722603083 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.722610950 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.722655058 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.722655058 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.723633051 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.723654032 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.723717928 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.723725080 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.723737001 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.723762035 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.723767042 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.723813057 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.723813057 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.723820925 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.723891973 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.724632978 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.724654913 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.724807978 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.724807978 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.724817991 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.724863052 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.725047112 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.725377083 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.725398064 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.725486994 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.725486994 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.725495100 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.725550890 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.726162910 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.726182938 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.726238966 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.726247072 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.726279974 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.726279974 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.727051973 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.727072001 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.727157116 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.727165937 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.727206945 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.822660923 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.822688103 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.822767973 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.822783947 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.822801113 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.822834015 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.823071957 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.823091030 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.823134899 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.823143959 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.823209047 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.823209047 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.823669910 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.823689938 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.823765993 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.823771954 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.823822021 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.824333906 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.824356079 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.824469090 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.824476004 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.824538946 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.825110912 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.825130939 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.825304985 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.825304985 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.825315952 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.825368881 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.825891972 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.825933933 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.825963020 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.825968981 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.825997114 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.826100111 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.826234102 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.826253891 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.826308966 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.826316118 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.826383114 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.826383114 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.827030897 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.827053070 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.827115059 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.827121973 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.827178955 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.827178955 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.827915907 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.827936888 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.828011036 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.828018904 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.828052998 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.828052998 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.828814030 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.828835964 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.828917980 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.828931093 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.829066038 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.840795040 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.840828896 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.840890884 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.840910912 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.840934992 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.840980053 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.841221094 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.841275930 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.841408968 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.841408968 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.841419935 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.841569901 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.841993093 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.842014074 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.842081070 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.842081070 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.842088938 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.842175961 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.842983961 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843003988 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843238115 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.843238115 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.843244076 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843327999 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.843377113 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843396902 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843441010 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843458891 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.843458891 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.843470097 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.843594074 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.843594074 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.844034910 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.844054937 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.844113111 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.844113111 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.844120979 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.844985962 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845012903 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845042944 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.845057964 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845096111 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.845865965 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845885038 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845947027 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.845947981 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845963001 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.845992088 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.846018076 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.846025944 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.846045017 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.846088886 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.940248966 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.940284014 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.940355062 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.940366030 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.940381050 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.940409899 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.940912962 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.940933943 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.940996885 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.941004992 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.941036940 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.941122055 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.941517115 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.941536903 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.941627026 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.941632986 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.941695929 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.941695929 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.942095041 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.942115068 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.942190886 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.942198038 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.942305088 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.942682981 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.942703962 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.942819118 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.942819118 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.942826986 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.942914963 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.943178892 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.943201065 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.943249941 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.943275928 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.943293095 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.943372965 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.944072962 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.944092989 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.944153070 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.944160938 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.944171906 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.944226980 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.944856882 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.944876909 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.944969893 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.944982052 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945035934 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.945564032 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945584059 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945622921 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.945643902 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945656061 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945678949 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.945683002 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945700884 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.945712090 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.945724964 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.945797920 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.946559906 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.946580887 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.946636915 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.946650028 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.946695089 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.946695089 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.956644058 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.956665993 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.956751108 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.956751108 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.956759930 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.956824064 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.957257032 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.957287073 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.957405090 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.957405090 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.957412958 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.957467079 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.957755089 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.957773924 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.957875967 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.957875967 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.957882881 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.957987070 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.958559036 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.958579063 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.958619118 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.958626032 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.958764076 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.958764076 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.958945990 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.958966017 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.959033012 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.959033012 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.959043026 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.959151983 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.959557056 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.959583998 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.959619045 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.959625006 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.959650993 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.959651947 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.960259914 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.960280895 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.960324049 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.960330963 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.960390091 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.960390091 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.960623026 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.960649967 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.960683107 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.960690975 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.960722923 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.960747957 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.961850882 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.961873055 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.961944103 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.961972952 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.962003946 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.962003946 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.962012053 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.962045908 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.962058067 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.962110996 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.962286949 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.962304115 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:46.962315083 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:46.962321043 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:47.086952925 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.091182947 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.091203928 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.091723919 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.092219114 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.092293024 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.092381954 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.135337114 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.144283056 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.272922039 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.273020029 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.273327112 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.276396036 CET	50022	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.276416063 CET	443	50022	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.291996002 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.292215109 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.292229891 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.293348074 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.293420076 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.293701887 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.293762922 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.293838024 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.293843031 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.346190929 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.574525118 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574546099 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574568987 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574605942 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574620008 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.574625015 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574635983 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574645996 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.574666977 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.574697018 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.576986074 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.577019930 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.577085018 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.577091932 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.620495081 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.691978931 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.691996098 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.692044973 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.692071915 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.692089081 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.692116022 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.692132950 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.693383932 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.693409920 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.693455935 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.693460941 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.693490028 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.693510056 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.695197105 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.695218086 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.695264101 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.695269108 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.695297956 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.695452929 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.696743965 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.696763992 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.696808100 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.696814060 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.696842909 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.696862936 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.809292078 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.809313059 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.809526920 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.809556007 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.810199022 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.810290098 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.810308933 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.810359001 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.810364962 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.810998917 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.811110020 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.811126947 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.811162949 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.811167955 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.811196089 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.811216116 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.812237024 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.812253952 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.812320948 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.812325954 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.812380075 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.813188076 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.813204050 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.813242912 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.813251972 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.813268900 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.813290119 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.814210892 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.814228058 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.814297915 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.814305067 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.814347029 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.814997911 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.815015078 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.815057993 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.815063953 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.815090895 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.815107107 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.892452002 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.892460108 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.892851114 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.893069983 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:47.893079996 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:47.926501036 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.926520109 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.926563978 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.926582098 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.926606894 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.926620007 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.926911116 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.926933050 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.926985979 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.926991940 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.927328110 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.927470922 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.927485943 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.927539110 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.927544117 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.927759886 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.932133913 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.932149887 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.932205915 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.932212114 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.932298899 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.932634115 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.932648897 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.932696104 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.932702065 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.932748079 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.932748079 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.933532953 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.933548927 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.933603048 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.933607101 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.933641911 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.933656931 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.934186935 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.934201956 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.934258938 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.934264898 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.934330940 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.934595108 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.934611082 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.934653044 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.934659958 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.934684038 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.934704065 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935131073 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935148001 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935210943 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935216904 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935323000 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935522079 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935538054 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935575962 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935581923 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935621023 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935640097 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935712099 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935760975 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935765982 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935794115 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:47.935807943 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.935854912 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.936238050 CET	50023	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:47.936253071 CET	443	50023	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:48.564747095 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.565727949 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.565745115 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.566266060 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.568727016 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.568829060 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.568870068 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.611339092 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.612993956 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.731080055 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.731106043 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.731175900 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:48.731365919 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.731365919 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.957431078 CET	50029	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:48.957448959 CET	443	50029	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:49.093167067 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.093204975 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.093261957 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.093492985 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.093508005 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.492290020 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:49.492327929 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:49.492410898 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:49.492723942 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:49.492738008 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:49.760437012 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.760885954 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.760900021 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.761429071 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.761985064 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.762063026 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.763364077 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.807332993 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.927118063 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.927146912 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.927225113 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:49.927261114 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.927304983 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.928590059 CET	50031	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:49.928613901 CET	443	50031	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:50.172447920 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.176342010 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:50.176367044 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.176970959 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.177561998 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:50.177659035 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.179111004 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:50.223325968 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.342227936 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.342318058 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.342370987 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:50.343748093 CET	50032	443	192.168.2.5	18.232.196.105
Oct 30, 2024 15:58:50.343758106 CET	443	50032	18.232.196.105	192.168.2.5
Oct 30, 2024 15:58:50.359987020 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:50.360018015 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:50.360481977 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:50.360847950 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:50.360863924 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:51.040833950 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:51.095067978 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:51.348396063 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:51.348438025 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:51.349081993 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:51.392338991 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:51.392471075 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:51.393645048 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:51.438657045 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:51.438668013 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:51.784015894 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:51.784085035 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:51.784146070 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:52.097503901 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:52.098067999 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:52.098118067 CET	443	50033	44.195.159.156	192.168.2.5
Oct 30, 2024 15:58:52.098172903 CET	50033	443	192.168.2.5	44.195.159.156
Oct 30, 2024 15:58:52.107415915 CET	49985	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:58:52.107434988 CET	443	49985	142.250.185.228	192.168.2.5
Oct 30, 2024 15:58:52.486661911 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:52.486701965 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:52.486793995 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:52.492613077 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:52.492625952 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.223902941 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.224488974 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:53.224515915 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.226178885 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:53.226185083 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.366066933 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.366092920 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.366149902 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:53.366164923 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.366270065 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.366333961 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:53.366605043 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:53.366622925 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:58:53.366636038 CET	50036	443	192.168.2.5	13.107.246.45
Oct 30, 2024 15:58:53.366641998 CET	443	50036	13.107.246.45	192.168.2.5
Oct 30, 2024 15:59:05.097592115 CET	49706	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:59:11.801753044 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:59:11.801781893 CET	443	49991	23.1.237.91	192.168.2.5
Oct 30, 2024 15:59:11.801793098 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:59:11.801837921 CET	49991	443	192.168.2.5	23.1.237.91
Oct 30, 2024 15:59:24.392556906 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:59:24.392575979 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:59:34.192058086 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:59:34.192162991 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:59:34.192442894 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:59:35.394155025 CET	49965	443	192.168.2.5	3.93.255.10
Oct 30, 2024 15:59:35.394185066 CET	443	49965	3.93.255.10	192.168.2.5
Oct 30, 2024 15:59:40.956300974 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:40.956351042 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:40.956429958 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:40.956650019 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:40.956665993 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:41.821579933 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:41.821896076 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:41.821911097 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:41.823024988 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:41.823333979 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:41.823508024 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:41.876780987 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:51.825696945 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:51.825865030 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 15:59:51.825932980 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:53.394515038 CET	50041	443	192.168.2.5	142.250.185.228
Oct 30, 2024 15:59:53.394539118 CET	443	50041	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.018510103 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:41.018564939 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.018796921 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:41.022541046 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:41.022571087 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.882765055 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.883205891 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:41.883236885 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.883584976 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.884025097 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:41.884099960 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:41.924624920 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:51.901782990 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:51.901931047 CET	443	50043	142.250.185.228	192.168.2.5
Oct 30, 2024 16:00:51.901979923 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:53.490719080 CET	50043	443	192.168.2.5	142.250.185.228
Oct 30, 2024 16:00:53.490755081 CET	443	50043	142.250.185.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 15:57:40.558332920 CET	49606	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:57:40.616938114 CET	53	49606	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:37.008913040 CET	53	53138	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:37.084448099 CET	53	60230	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:38.327063084 CET	53	55520	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:38.433559895 CET	51378	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:38.433701038 CET	59613	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:38.490683079 CET	53	59613	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:38.641143084 CET	53	51378	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:39.634640932 CET	64042	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:39.635359049 CET	61176	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:39.647661924 CET	53	64042	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:39.647851944 CET	53	61176	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:40.892915964 CET	54120	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:40.893115044 CET	50772	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:40.900754929 CET	53	50772	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:40.900942087 CET	53	54120	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.765194893 CET	52599	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.765736103 CET	64578	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.771384954 CET	57008	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.771836042 CET	62529	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.773101091 CET	53	52599	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.773608923 CET	53	64578	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.774884939 CET	53	52474	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.776285887 CET	57289	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.776443958 CET	58767	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.777839899 CET	59510	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.777971029 CET	62455	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:44.779650927 CET	53	62529	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.779846907 CET	53	57008	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.784688950 CET	53	57289	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.785470009 CET	53	58767	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.785558939 CET	53	59510	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:44.786420107 CET	53	62455	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.597208977 CET	60643	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:45.597430944 CET	55881	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:45.606547117 CET	53	60643	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.608577967 CET	53	55881	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.611032963 CET	53	49691	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.621417999 CET	53	50955	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.640117884 CET	59278	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:45.640290022 CET	64023	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:45.648236036 CET	53	59278	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.649352074 CET	53	64023	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:45.656496048 CET	53	49289	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:46.428579092 CET	52241	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:46.428718090 CET	49256	53	192.168.2.5	1.1.1.1
Oct 30, 2024 15:58:46.460614920 CET	53	49256	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:46.460757971 CET	53	52241	1.1.1.1	192.168.2.5
Oct 30, 2024 15:58:55.260078907 CET	53	56612	1.1.1.1	192.168.2.5
Oct 30, 2024 15:59:10.370692015 CET	53	63336	1.1.1.1	192.168.2.5
Oct 30, 2024 15:59:14.119577885 CET	53	61255	1.1.1.1	192.168.2.5
Oct 30, 2024 15:59:29.205966949 CET	53	55782	1.1.1.1	192.168.2.5
Oct 30, 2024 15:59:36.298203945 CET	53	49771	1.1.1.1	192.168.2.5
Oct 30, 2024 15:59:36.870095968 CET	53	53728	1.1.1.1	192.168.2.5
Oct 30, 2024 15:59:51.972019911 CET	53	60298	1.1.1.1	192.168.2.5
Oct 30, 2024 16:00:07.292699099 CET	53	51832	1.1.1.1	192.168.2.5
Oct 30, 2024 16:00:22.372966051 CET	53	52873	1.1.1.1	192.168.2.5
Oct 30, 2024 16:00:53.995528936 CET	53	55951	1.1.1.1	192.168.2.5
Oct 30, 2024 16:01:09.092957020 CET	53	64973	1.1.1.1	192.168.2.5
Oct 30, 2024 16:01:16.713016987 CET	138	138	192.168.2.5	192.168.2.255
Oct 30, 2024 16:01:33.919807911 CET	53	62332	1.1.1.1	192.168.2.5
Oct 30, 2024 16:02:07.807975054 CET	53	58438	1.1.1.1	192.168.2.5
Oct 30, 2024 16:02:22.904638052 CET	53	54185	1.1.1.1	192.168.2.5
Oct 30, 2024 16:04:24.682648897 CET	53	56159	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 15:57:40.558332920 CET	192.168.2.5	1.1.1.1	0x2381	Standard query (0)	token.onelogin.com-token-auth.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.433559895 CET	192.168.2.5	1.1.1.1	0xc64a	Standard query (0)	token.onelogin.com-token-auth.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.433701038 CET	192.168.2.5	1.1.1.1	0x43c	Standard query (0)	token.onelogin.com-token-auth.com	65	IN (0x0001)	false
Oct 30, 2024 15:58:39.634640932 CET	192.168.2.5	1.1.1.1	0xf784	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.635359049 CET	192.168.2.5	1.1.1.1	0xf521	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Oct 30, 2024 15:58:40.892915964 CET	192.168.2.5	1.1.1.1	0xdf97	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:40.893115044 CET	192.168.2.5	1.1.1.1	0x7ca	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 15:58:44.765194893 CET	192.168.2.5	1.1.1.1	0xdfb1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.765736103 CET	192.168.2.5	1.1.1.1	0x9c0c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 15:58:44.771384954 CET	192.168.2.5	1.1.1.1	0xb610	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.771836042 CET	192.168.2.5	1.1.1.1	0x36d9	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Oct 30, 2024 15:58:44.776285887 CET	192.168.2.5	1.1.1.1	0xaf66	Standard query (0)	cdn2.hubspot.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.776443958 CET	192.168.2.5	1.1.1.1	0xfdf0	Standard query (0)	cdn2.hubspot.net	65	IN (0x0001)	false
Oct 30, 2024 15:58:44.777839899 CET	192.168.2.5	1.1.1.1	0x4a60	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.777971029 CET	192.168.2.5	1.1.1.1	0xfe3	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Oct 30, 2024 15:58:45.597208977 CET	192.168.2.5	1.1.1.1	0x1e83	Standard query (0)	cdn2.hubspot.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.597430944 CET	192.168.2.5	1.1.1.1	0x9a53	Standard query (0)	cdn2.hubspot.net	65	IN (0x0001)	false
Oct 30, 2024 15:58:45.640117884 CET	192.168.2.5	1.1.1.1	0x596f	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.640290022 CET	192.168.2.5	1.1.1.1	0x96ce	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Oct 30, 2024 15:58:46.428579092 CET	192.168.2.5	1.1.1.1	0x253a	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:46.428718090 CET	192.168.2.5	1.1.1.1	0x3041	Standard query (0)	secured-login.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	token.onelogin.com-token-auth.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	landing.training.knowbe4.com		3.93.255.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	landing.training.knowbe4.com		18.232.196.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	landing.training.knowbe4.com		34.197.84.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	landing.training.knowbe4.com		34.199.167.68	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	landing.training.knowbe4.com		44.195.159.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:57:40.616938114 CET	1.1.1.1	192.168.2.5	0x2381	No error (0)	landing.training.knowbe4.com		52.72.176.27	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:57:49.911250114 CET	1.1.1.1	192.168.2.5	0xeb4f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:57:49.911250114 CET	1.1.1.1	192.168.2.5	0xeb4f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.490683079 CET	1.1.1.1	192.168.2.5	0x43c	No error (0)	token.onelogin.com-token-auth.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	token.onelogin.com-token-auth.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	landing.training.knowbe4.com		3.93.255.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	landing.training.knowbe4.com		18.232.196.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	landing.training.knowbe4.com		34.197.84.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	landing.training.knowbe4.com		34.199.167.68	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	landing.training.knowbe4.com		44.195.159.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:38.641143084 CET	1.1.1.1	192.168.2.5	0xc64a	No error (0)	landing.training.knowbe4.com		52.72.176.27	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.647661924 CET	1.1.1.1	192.168.2.5	0xf784	No error (0)	secured-login.net		18.232.196.105	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.647661924 CET	1.1.1.1	192.168.2.5	0xf784	No error (0)	secured-login.net		44.195.159.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.647661924 CET	1.1.1.1	192.168.2.5	0xf784	No error (0)	secured-login.net		3.93.255.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.647661924 CET	1.1.1.1	192.168.2.5	0xf784	No error (0)	secured-login.net		34.197.84.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.647661924 CET	1.1.1.1	192.168.2.5	0xf784	No error (0)	secured-login.net		34.199.167.68	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:39.647661924 CET	1.1.1.1	192.168.2.5	0xf784	No error (0)	secured-login.net		52.72.176.27	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:40.900754929 CET	1.1.1.1	192.168.2.5	0x7ca	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 15:58:40.900942087 CET	1.1.1.1	192.168.2.5	0xdf97	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.773101091 CET	1.1.1.1	192.168.2.5	0xdfb1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.773101091 CET	1.1.1.1	192.168.2.5	0xdfb1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.773608923 CET	1.1.1.1	192.168.2.5	0x9c0c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		52.216.77.118	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		52.217.163.184	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		16.182.67.48	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		52.217.234.128	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		54.231.197.144	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		52.217.201.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		52.217.116.40	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.779846907 CET	1.1.1.1	192.168.2.5	0xb610	No error (0)	s3.amazonaws.com		52.217.68.102	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.784688950 CET	1.1.1.1	192.168.2.5	0xaf66	No error (0)	cdn2.hubspot.net		104.18.90.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.784688950 CET	1.1.1.1	192.168.2.5	0xaf66	No error (0)	cdn2.hubspot.net		104.18.88.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.784688950 CET	1.1.1.1	192.168.2.5	0xaf66	No error (0)	cdn2.hubspot.net		104.18.91.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.784688950 CET	1.1.1.1	192.168.2.5	0xaf66	No error (0)	cdn2.hubspot.net		104.18.89.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.784688950 CET	1.1.1.1	192.168.2.5	0xaf66	No error (0)	cdn2.hubspot.net		104.18.87.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.785470009 CET	1.1.1.1	192.168.2.5	0xfdf0	No error (0)	cdn2.hubspot.net			65	IN (0x0001)	false
Oct 30, 2024 15:58:44.785558939 CET	1.1.1.1	192.168.2.5	0x4a60	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:58:44.785558939 CET	1.1.1.1	192.168.2.5	0x4a60	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.785558939 CET	1.1.1.1	192.168.2.5	0x4a60	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:44.786420107 CET	1.1.1.1	192.168.2.5	0xfe3	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:58:45.606547117 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cdn2.hubspot.net		104.18.91.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.606547117 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cdn2.hubspot.net		104.18.88.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.606547117 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cdn2.hubspot.net		104.18.89.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.606547117 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cdn2.hubspot.net		104.18.90.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.606547117 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cdn2.hubspot.net		104.18.87.62	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.608577967 CET	1.1.1.1	192.168.2.5	0x9a53	No error (0)	cdn2.hubspot.net			65	IN (0x0001)	false
Oct 30, 2024 15:58:45.648236036 CET	1.1.1.1	192.168.2.5	0x596f	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:58:45.648236036 CET	1.1.1.1	192.168.2.5	0x596f	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.648236036 CET	1.1.1.1	192.168.2.5	0x596f	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:45.649352074 CET	1.1.1.1	192.168.2.5	0x96ce	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:58:46.460757971 CET	1.1.1.1	192.168.2.5	0x253a	No error (0)	secured-login.net		44.195.159.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:46.460757971 CET	1.1.1.1	192.168.2.5	0x253a	No error (0)	secured-login.net		34.197.84.21	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:46.460757971 CET	1.1.1.1	192.168.2.5	0x253a	No error (0)	secured-login.net		34.199.167.68	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:46.460757971 CET	1.1.1.1	192.168.2.5	0x253a	No error (0)	secured-login.net		3.93.255.10	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:46.460757971 CET	1.1.1.1	192.168.2.5	0x253a	No error (0)	secured-login.net		52.72.176.27	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:58:46.460757971 CET	1.1.1.1	192.168.2.5	0x253a	No error (0)	secured-login.net		18.232.196.105	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

token.onelogin.com-token-auth.com

otelrules.azureedge.net

slscr.update.microsoft.com

https:

secured-login.net

www.bing.com

cdn2.hubspot.net

cdnjs.cloudflare.com

s3.amazonaws.com

i.imgur.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	3.93.255.10	443	7092	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:41 UTC	393	OUT	GET /XRFZaREExRTA0Wko4MHRSeXFnWEhUUW5oNEF5cFdzN1RvN3dzVzlMWHdHdzlma2Jjc1BNYnNEc1g0WXJQYy9JSWlFVUpIbDE4cGdMcDBLdk54bEZydEJqRTBYdFpoeDZHUGtwZ0tTaVZ3cWZjL2ppVG5KQks1RE0xU21IUzd3PT0tLXVERnZSL2NmN25kNkovUUEtLUIxb3JrOUhOcUxJS1puMmpQNU5DN1E9PQ==?cid=2262276963 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16) Host: token.onelogin.com-token-auth.com
2024-10-30 14:57:41 UTC	486	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:41 GMT Content-Type: text/html Content-Length: 0 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 7d51f4aa-ff2b-4efc-bc83-74794728f0a5 X-Runtime: 0.102116 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:45 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-30 14:57:45 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:45 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:45 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: 9585f7bd-ab9b-46ac-8898-c2f6812457d3 PPServer: PPV: 30 H: BL02EPF0001D7D2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:45 GMT Connection: close Content-Length: 1276
2024-10-30 14:57:45 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:46 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-30 14:57:46 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:47 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:47 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: c6947c46-7369-42de-9e85-507221581d62 PPServer: PPV: 30 H: SN1PEPF0002F160 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:46 GMT Connection: close Content-Length: 1276
2024-10-30 14:57:47 UTC	1276	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:46 UTC	446	OUT	POST /ppsecure/deviceaddcredential.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 7642 Host: login.live.com
2024-10-30 14:57:46 UTC	7642	OUT	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 71 75 65 73 74 3e 3c 43 6c 69 65 6e 74 49 6e 66 6f 20 6e 61 6d 65 3d 22 49 44 43 52 4c 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 3c 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 32 34 3c 2f 42 69 6e 61 72 79 56 65 72 73 69 6f 6e 3e 3c 2f 43 6c 69 65 6e 74 49 6e 66 6f 3e 3c 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 6a 70 7a 61 69 70 75 76 78 6a 78 78 71 78 3c 2f 4d 65 6d 62 65 72 6e 61 6d 65 3e 3c 50 61 73 73 77 6f 72 64 3e 33 6a 4f 6e 6c 37 2f 31 45 73 79 4d 69 72 74 51 25 78 55 39 3c 2f 50 61 73 73 77 6f 72 64 3e 3c 2f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3e 3c 4f 6c 64 4d 65 6d 62 65 72 6e 61 6d 65 3e 30 32 76 6e 71 75 73 6b 66 70 70 70 63 69 76 63 3c 2f 4f 6c 64 4d Data Ascii: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"><BinaryVersion>24</BinaryVersion></ClientInfo><Authentication><Membername>02jpzaipuvxjxxqx</Membername><Password>3jOnl7/1EsyMirtQ%xU9</Password></Authentication><OldMembername>02vnquskfpppcivc</OldM
2024-10-30 14:57:48 UTC	542	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/xml Expires: Wed, 30 Oct 2024 14:56:47 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C542_SN1 x-ms-request-id: 999e570c-6969-4c2d-883f-2622d4f13ae5 PPServer: PPV: 30 H: SN1PEPF0002F15B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:48 GMT Connection: close Content-Length: 17166
2024-10-30 14:57:48 UTC	15842	IN	Data Raw: 3c 44 65 76 69 63 65 41 64 64 52 65 73 70 6f 6e 73 65 20 53 75 63 63 65 73 73 3d 22 74 72 75 65 22 3e 3c 73 75 63 63 65 73 73 3e 74 72 75 65 3c 2f 73 75 63 63 65 73 73 3e 3c 70 75 69 64 3e 30 30 31 38 34 30 31 30 34 34 36 45 36 36 42 44 3c 2f 70 75 69 64 3e 3c 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 33 3c 2f 44 65 76 69 63 65 54 70 6d 4b 65 79 53 74 61 74 65 3e 3c 4c 69 63 65 6e 73 65 20 43 6f 6e 74 65 6e 74 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 2d 38 63 63 35 2d 62 32 66 35 33 63 38 33 30 62 37 36 22 20 49 44 3d 22 30 30 34 30 39 37 35 63 2d 66 37 39 39 2d 34 34 62 31 2d 38 33 63 33 2d 32 31 39 64 63 63 36 61 66 32 65 65 22 20 4c 69 63 65 6e 73 65 49 44 3d 22 33 32 35 32 62 32 30 63 2d 64 34 32 35 2d 34 37 31 31 Data Ascii: <DeviceAddResponse Success="true"><success>true</success><puid>00184010446E66BD</puid><DeviceTpmKeyState>3</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="0040975c-f799-44b1-83c3-219dcc6af2ee" LicenseID="3252b20c-d425-4711
2024-10-30 14:57:48 UTC	1324	IN	Data Raw: 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 39 2f 78 6d 6c 64 73 69 67 23 65 6e 76 65 6c 6f 70 65 64 2d 73 69 67 6e 61 74 75 72 65 22 2f 3e 3c 2f 54 72 61 6e 73 66 6f 72 6d 73 3e 3c 44 69 67 65 73 74 4d 65 74 68 6f 64 20 41 6c 67 6f 72 69 74 68 6d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 30 34 2f 78 6d 6c 65 6e 63 23 73 68 61 32 35 36 22 2f 3e 3c 44 69 67 65 73 74 56 61 6c 75 65 3e 67 74 71 77 70 52 35 66 47 44 61 6f 48 73 4d 37 49 57 47 4b 5a 67 61 77 58 61 30 42 50 69 47 61 65 35 62 49 75 6e 2f 52 51 4a 41 3d 3c 2f 44 69 67 65 73 74 56 61 6c 75 65 3e 3c 2f 52 65 66 65 72 65 6e 63 65 3e 3c 2f 53 69 67 6e 65 64 49 6e 66 6f 3e 3c 53 69 67 6e 61 74 75 72 65 56 61 6c 75 65 3e 41 46 38 6f 46 52 2b 47 66 Data Ascii: tp://www.w3.org/2000/09/xmldsig#enveloped-signature"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>gtqwpR5fGDaoHsM7IWGKZgawXa0BPiGae5bIun/RQJA=</DigestValue></Reference></SignedInfo><SignatureValue>AF8oFR+Gf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:50 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-30 14:57:50 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:50 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:50 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30405.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_SN1 x-ms-request-id: e0f14b62-85a6-4186-943a-734f9a26a936 PPServer: PPV: 30 H: SN1PEPF0002F020 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:50 GMT Connection: close Content-Length: 11392
2024-10-30 14:57:50 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:50 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:50 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:50 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145750Z-17c5cb586f64v7xsc2ahm8gsgw000000035000000000cn5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:50 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 14:57:50 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 14:57:50 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 14:57:51 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:51 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BWm1vu53FzVgaMW&MD=mFVnLu+e HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 14:57:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 324679f5-9093-4f85-8bab-2480743b20fe MS-RequestId: 5d005cb6-0e9d-44ce-98c5-c6cb0ac2732a MS-CV: XpU0Ly8apUGkFMXo.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 14:57:51 GMT Connection: close Content-Length: 24490
2024-10-30 14:57:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 14:57:53 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:52 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:53 UTC	568	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:52 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: cb5553aa-e01e-001f-3f7b-2a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145752Z-r197bdfb6b4xfp4mncra29rqkc00000001hg00000000n0hh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 14:57:53 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:52 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-30 14:57:52 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:53 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:52 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30405.5 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_SN1 x-ms-request-id: 5696d419-b2b4-4327-924c-ff7a5a01fcf0 PPServer: PPV: 30 H: SN1PEPF0002F021 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:52 GMT Connection: close Content-Length: 11392
2024-10-30 14:57:53 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:52 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:52 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145752Z-16849878b78fssff8btnns3b1400000008f000000000ed4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:53 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:52 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:52 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 54e1ad71-801e-008f-48b2-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145752Z-17c5cb586f6hn8cl90dxzu28kw000000089g00000000810k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:53 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:52 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:52 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145752Z-16849878b787wpl5wqkt5731b400000008y000000000e5yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:53 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:53 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145754Z-15b8d89586flspj6y6m5fk442w0000000e5g000000003wwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:53 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145753Z-16849878b787wpl5wqkt5731b400000008ug00000000v84x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:53 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:53 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145753Z-15b8d89586flzzksdx5d6q7g10000000039g00000000c782 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:53 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145754Z-16849878b78q9m8bqvwuva4svc00000006p000000000pgsv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:54 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-30 14:57:54 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:54 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:54 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_SN1 x-ms-request-id: 9a88328d-f2d7-49a1-ba4b-31b5a8298600 PPServer: PPV: 30 H: SN1PEPF0003FB43 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:53 GMT Connection: close Content-Length: 1918
2024-10-30 14:57:54 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:54 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:54 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d6813257-101e-0034-034f-2896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145754Z-15b8d89586fst84kttks1s2css00000001vg00000000afct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:54 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145754Z-16849878b78qwx7pmw9x5fub1c000000066g00000000vv2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:54 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145754Z-16849878b78q9m8bqvwuva4svc00000006t0000000005gq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:54 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145754Z-16849878b78sx229w7g7at4nkg00000006gg00000000343m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:55 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145755Z-15b8d89586flzzksdx5d6q7g1000000003cg000000005uaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:55 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145755Z-17c5cb586f6mhqqby1dwph2kzs00000003e000000000fd4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:55 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:55 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145755Z-16849878b78bcpfn2qf7sm6hsn00000009w0000000004433 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:55 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:55 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 9426c385-b01e-0053-505f-27cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145755Z-r197bdfb6b4mcssrk8cfa4gm1g00000001u000000000mgxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:55 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49741	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:55 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-30 14:57:55 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:56 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:56 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_SN1 x-ms-request-id: ea422cc7-ab4b-4745-9db9-e87505cd469b PPServer: PPV: 30 H: SN1PEPF0002F8F4 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:55 GMT Connection: close Content-Length: 11412
2024-10-30 14:57:56 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:56 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:56 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:56 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145756Z-16849878b78tg5n42kspfr0x48000000084g00000000pkwt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:56 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:56 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:56 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bf2855ec-b01e-0084-57b7-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145756Z-16849878b78smng4k6nq15r6s400000009q000000000f1cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:57:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:56 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:56 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 860a7776-a01e-00ab-0afb-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145756Z-r197bdfb6b4g24ztpxkw4umce800000009u0000000007fk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:56 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:57 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:57 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:57 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 647ea265-801e-0067-10e5-29fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145757Z-r197bdfb6b4xfp4mncra29rqkc00000001h000000000p481 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 14:57:57 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:57 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2faa3f77-001e-008d-269c-27d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145757Z-r197bdfb6b46krmwag4tzr9x7c00000007z000000000gdz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:57 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:57 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145757Z-16849878b786lft2mu9uftf3y400000009e000000000ebvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:57:57 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49750	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:57 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-30 14:57:57 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:58 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:58 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_BL2 x-ms-request-id: e2884c10-50c5-4e17-852a-082573f40f92 PPServer: PPV: 30 H: BL02EPF0001D8E1 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:57 GMT Connection: close Content-Length: 11412
2024-10-30 14:57:58 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:57 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145757Z-16849878b785dznd7xpawq9gcn00000009gg00000000nkw4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:58 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:58 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 73bfd404-001e-0066-7fd4-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145758Z-17c5cb586f67hfgj2durhqcxk8000000070g00000000fbht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:58 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:58 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:58 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: afbd30f1-101e-007a-739c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145758Z-r197bdfb6b4mcssrk8cfa4gm1g00000001v000000000h54s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:58 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:58 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145758Z-16849878b78nzcqcd7bed2fb6n00000000m000000000g9xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:57:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:58 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145758Z-16849878b786lft2mu9uftf3y400000009fg000000008cv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:57:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:59 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145759Z-16849878b78x6gn56mgecg60qc0000000a2g0000000030k7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:59 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: d73e8916-101e-008d-6973-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145759Z-17c5cb586f62bgw58esgbu9hgw0000000100000000000ysa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:57:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49758	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:59 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-30 14:57:59 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:57:59 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:56:59 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_BAY x-ms-request-id: 4b0c649e-68f8-4d01-b434-280de681d619 PPServer: PPV: 30 H: PH1PEPF00011F9A V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:57:59 GMT Connection: close Content-Length: 11412
2024-10-30 14:57:59 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:59 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:59 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145759Z-16849878b78fhxrnedubv5byks00000006e000000000q85q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:59 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:59 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:57:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:57:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145759Z-16849878b78qwx7pmw9x5fub1c000000067g00000000ucgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:57:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:57:59 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145800Z-16849878b78bcpfn2qf7sm6hsn00000009w00000000044c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:00 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145800Z-16849878b78p8hrf1se7fucxk8000000092000000000cv1p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:00 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:00 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145800Z-15b8d89586ff5l62aha9080wv000000009h0000000008ttn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:00 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:00 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:00 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145800Z-16849878b78z2wx67pvzz63kdg00000006wg000000001ms9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:00 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:00 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145800Z-15b8d89586fmhkw429ba5n22m800000009n000000000c898 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49767	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:00 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-10-30 14:58:00 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-30 14:58:01 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 30 Oct 2024 14:57:01 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C503_BL2 x-ms-request-id: 12bf621f-4a88-4b99-a0c7-2946c837ef96 PPServer: PPV: 30 H: BL02EPF0001D6F5 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 30 Oct 2024 14:58:01 GMT Connection: close Content-Length: 10197
2024-10-30 14:58:01 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:01 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:01 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e7cc90bd-401e-0029-032a-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145801Z-15b8d89586fpccrmgpemqdqe58000000032000000000ac1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:01 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:01 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:01 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145801Z-16849878b78z2wx67pvzz63kdg00000006sg00000000hrrn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:01 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:01 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:01 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: f296e79a-801e-008c-04d4-297130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145801Z-r197bdfb6b46kmj4701qkq6024000000079g00000000bu7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:01 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:02 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:02 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145802Z-16849878b78j5kdg3dndgqw0vg00000009w000000000hgsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:02 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:02 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:02 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145802Z-16849878b78qfbkc5yywmsbg0c00000007vg00000000f32m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:02 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:02 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:02 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145802Z-15b8d89586fbmg6qpd9yf8zhm00000000370000000001zz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:02 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:03 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145803Z-16849878b78z2wx67pvzz63kdg00000006pg00000000wgav x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:03 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:03 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 6cea588d-401e-0015-2b7f-2a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145803Z-r197bdfb6b4zbthzeykwgnvx8s00000000vg00000000kzzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:03 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 336bf192-401e-00ac-1a67-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145803Z-15b8d89586flzzksdx5d6q7g10000000038000000000g7tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:04 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145804Z-16849878b78fssff8btnns3b1400000008eg00000000g875 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:04 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145804Z-16849878b78x6gn56mgecg60qc00000009vg00000000wsxq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:04 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145804Z-16849878b785jrf8dn0d2rczaw00000009c0000000009znz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:04 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e1dd5be0-d01e-00a1-2084-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145804Z-r197bdfb6b4cxj4bmw6ag8gees00000000y0000000002d4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:04 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145805Z-16849878b787bfsh7zgp804my40000000710000000006tcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:04 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145805Z-16849878b78km6fmmkbenhx76n00000007e000000000s3qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:05 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14980f11-e01e-00aa-5d14-29ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145805Z-r197bdfb6b4n9cxdnknw89p4zg0000000160000000005a7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:05 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145805Z-r197bdfb6b4grkz4xgvkar0zcs00000007ug00000000du1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:05 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145805Z-16849878b78nzcqcd7bed2fb6n00000000n000000000dp4z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:05 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:05 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145805Z-16849878b78qfbkc5yywmsbg0c00000007tg00000000p5pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:05 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145806Z-16849878b78bcpfn2qf7sm6hsn00000009u000000000bkhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:06 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145806Z-16849878b78fkwcjkpn19c5dsn000000072g00000000vkx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145806Z-16849878b78x6gn56mgecg60qc0000000a30000000000v8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:06 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:06 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 4e972348-801e-00ac-276d-28fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145806Z-15b8d89586fpccrmgpemqdqe5800000002zg00000000fs8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:06 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:06 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145806Z-16849878b78tg5n42kspfr0x48000000084g00000000pmgb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145807Z-16849878b78g2m84h2v9sta29000000006z000000000w4p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145807Z-16849878b78fssff8btnns3b1400000008c000000000rxg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 16c434fb-a01e-0032-1c41-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145807Z-17c5cb586f69w69mgazyf263an00000007a000000000haxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:07 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 90a6b530-901e-007b-6be7-28ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145807Z-r197bdfb6b4xfp4mncra29rqkc00000001m000000000gv1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145808Z-16849878b7867ttgfbpnfxt44s00000007xg00000000x87s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145808Z-16849878b78hh85qc40uyr8sc800000008gg000000007qdf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 670c0d8f-b01e-0002-01b6-291b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145808Z-15b8d89586fbmg6qpd9yf8zhm00000000370000000002080 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:08 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145808Z-15b8d89586fmhjx6a8nf3qm53c00000001xg00000000hqqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:08 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145808Z-16849878b78g2m84h2v9sta290000000072g00000000h391 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9f581369-601e-00ab-15c9-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145809Z-16849878b78tg5n42kspfr0x48000000086g00000000duyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145809Z-16849878b78hh85qc40uyr8sc800000008c000000000se36 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 4f8161d3-a01e-00ab-6acd-2a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145809Z-r197bdfb6b4cxj4bmw6ag8gees00000000v000000000cahu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145809Z-15b8d89586fvpb59307bn2rcac00000003b0000000008eqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:10 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:10 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f17b3a4e-c01e-002b-72e7-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145810Z-17c5cb586f6hn8cl90dxzu28kw000000086g00000000eewx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:10 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145810Z-15b8d89586fbmg6qpd9yf8zhm0000000033g00000000an3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:10 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 34089ae0-601e-005c-0dae-2af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145810Z-r197bdfb6b4cnxt4mv5f3apubw00000000wg0000000017n1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145810Z-16849878b78g2m84h2v9sta29000000006z000000000w4xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c317859a-501e-00a3-19db-27c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145811Z-r197bdfb6b4grkz4xgvkar0zcs00000007tg00000000fnns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:11 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 3b13a0aa-201e-003f-7a6e-2a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145811Z-r197bdfb6b4xfp4mncra29rqkc00000001m000000000gv98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:11 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a1443afe-101e-00a2-13ee-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145811Z-15b8d89586flspj6y6m5fk442w0000000e2g00000000a6be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145811Z-16849878b78qg9mlz11wgn0wcc00000007v0000000004f61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 8cffccf2-101e-0046-26c7-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-17c5cb586f6z6tq2xr35mhd5x000000000sg00000000d03q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-16849878b78bjkl8dpep89pbgg00000006y0000000007zsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 45d05379-301e-006e-0c9a-29f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-r197bdfb6b4c8q4qvwwy2byzsw00000008mg000000004h6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-16849878b78tg5n42kspfr0x48000000088g000000005hxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-16849878b78j5kdg3dndgqw0vg00000009vg00000000kp9f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 980a0530-101e-00a2-7d83-299f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-r197bdfb6b4grkz4xgvkar0zcs00000007xg000000005qvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145812Z-16849878b78xblwksrnkakc08w00000007a000000000vkmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145813Z-16849878b786fl7gm2qg4r5y7000000008fg00000000c132 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145813Z-16849878b78qwx7pmw9x5fub1c000000068000000000qfrh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145813Z-16849878b78km6fmmkbenhx76n00000007f000000000p00y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145813Z-16849878b78nx5sne3fztmu6xc000000096000000000a3uy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145814Z-16849878b785jrf8dn0d2rczaw00000009cg0000000084f5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145814Z-16849878b78qf2gleqhwczd21s00000008f00000000038s0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:14 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:14 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 24b2bddd-501e-0016-07ca-2a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145814Z-16849878b78wv88bk51myq5vxc00000008k0000000001hne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:14 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145814Z-16849878b78qg9mlz11wgn0wcc00000007p000000000urs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: bef0a497-701e-005c-1f9c-29bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145814Z-17c5cb586f69w69mgazyf263an00000007h00000000003f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 8a6aace2-001e-0017-571c-290c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145815Z-15b8d89586fnsf5zkvx8tfb0zc00000003ag000000009hb4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:15 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145815Z-16849878b78zqkvcwgr6h55x9n00000007q0000000007tfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 927d9f3b-101e-0034-1176-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145815Z-r197bdfb6b4grkz4xgvkar0zcs00000007u000000000dbrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145815Z-16849878b78xblwksrnkakc08w00000007dg00000000gced x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c0e66d29-801e-00a0-12d5-272196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145815Z-r197bdfb6b4zbthzeykwgnvx8s00000000yg00000000chr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 599f4d6b-b01e-00ab-7137-2adafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145815Z-15b8d89586fvk4kmbg8pf84y88000000092000000000cgh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:16 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:16 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145816Z-16849878b7867ttgfbpnfxt44s000000083g000000006xfq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:16 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a88111ac-001e-0034-692b-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145816Z-15b8d89586fbmg6qpd9yf8zhm0000000030g00000000g6nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145816Z-16849878b785jrf8dn0d2rczaw000000099000000000r804 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:16 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145816Z-16849878b78p49s6zkwt11bbkn00000007y0000000002763 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:16 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145816Z-16849878b78j5kdg3dndgqw0vg00000009sg00000000x6zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145816Z-15b8d89586f8nxpt6ys645x5v000000009eg000000009ksy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:17 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145817Z-16849878b78fssff8btnns3b1400000008h0000000005r63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:17 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145817Z-16849878b78wc6ln1zsrz6q9w800000007u000000000n44m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c633743c-801e-007b-7ea5-2ae7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145817Z-17c5cb586f62vrfquq10qybcuw000000012000000000m0nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:17 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145817Z-16849878b78x6gn56mgecg60qc0000000a0g00000000b8a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:17 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145817Z-16849878b78fssff8btnns3b1400000008b000000000vhx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145817Z-16849878b78qg9mlz11wgn0wcc00000007u0000000008ucv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: a3881376-a01e-000d-19f4-27d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145818Z-r197bdfb6b4mcssrk8cfa4gm1g00000001xg00000000ah6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:18 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 47e1cb19-101e-0034-6f13-2996ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145818Z-r197bdfb6b4grkz4xgvkar0zcs00000007tg00000000fp4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a91e6534-e01e-0020-5f90-27de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145818Z-17c5cb586f6fqqst87nqkbsx1c00000006hg00000000gy5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:18 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:18 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145818Z-16849878b78xblwksrnkakc08w00000007b000000000rxvz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:18 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:18 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:18 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145818Z-16849878b78fssff8btnns3b1400000008ag00000000vcut x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:18 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:19 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145819Z-16849878b78xblwksrnkakc08w00000007d000000000hnsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:19 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: fad7475d-801e-002a-7d7c-2a31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145819Z-15b8d89586flzzksdx5d6q7g10000000037g00000000gmfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:19 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145819Z-16849878b78km6fmmkbenhx76n00000007e000000000s4rz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145819Z-15b8d89586ff5l62aha9080wv000000009m0000000003ash x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: d4940829-c01e-0014-691e-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145819Z-17c5cb586f62vrfquq10qybcuw000000018g0000000026ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:20 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145820Z-16849878b7898p5f6vryaqvp5800000008y000000000s5gf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:20 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145820Z-16849878b78wc6ln1zsrz6q9w800000007s000000000tpvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:58:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:20 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145820Z-17c5cb586f69w69mgazyf263an000000079000000000k9h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:20 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:20 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 2adb5bf6-401e-0067-6309-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145820Z-17c5cb586f6sqz6f73fsew1zd800000001xg00000000as70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:20 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:20 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 38943712-901e-002a-666e-2a7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145820Z-r197bdfb6b4xfp4mncra29rqkc00000001ng00000000caz9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:21 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:21 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 419dffea-201e-003c-451f-2830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145821Z-15b8d89586fvk4kmbg8pf84y88000000092000000000cgvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:21 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:21 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 5f8d7b84-a01e-000d-1237-2ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145821Z-r197bdfb6b4n9cxdnknw89p4zg00000001500000000084qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:21 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:21 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:21 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0c61b981-a01e-003d-7c37-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145821Z-15b8d89586ff5l62aha9080wv000000009dg00000000g1rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:21 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:21 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:21 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145821Z-16849878b78xblwksrnkakc08w00000007g0000000005t07 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:21 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:21 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145821Z-16849878b78q9m8bqvwuva4svc00000006qg00000000ggba x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:22 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145822Z-16849878b78nzcqcd7bed2fb6n00000000g000000000fse7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:58:22 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:58:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:58:22 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145822Z-16849878b78qwx7pmw9x5fub1c00000006b000000000bm8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:58:22 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Target ID:	0
Start time:	10:57:35
Start date:	30/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x370000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	10:58:34
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	10:58:35
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1960,i,11312333393392567523,16776405467321977601,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	10:58:37
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://token.onelogin.com-token-auth.com/XSXlhcWVXNTNDeHhubXJLUTBweXFzVzVMWXcrMXFQM1JKVXZiVzNIVWUxR3BwVjFIUmxtak9HL3htK3F6TllCTVNlenAvNlFQcnR3aWplTlZlZ3MvQ3hWMjdrRG1BYU5NSmR6QWJiQXZJZ0tIem1jbjgwOG00KzVnZS9LQUsxOWt5LzhablRVeVdNYTJ4WjM4RFFXTVpoZGc0bkFjSjdUNHlQTE4xR0pNTG51QUQ1ekdvRUtldFhPazl3PT0tLVhreWZjSlpEVHVtaVpaOTItLVJQeDRBeGFkOGhrTmc4S0xIR3cwcmc9PQ==?cid=2262276963"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	10:58:39
Start date:	30/10/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff6dfe30000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of open application windows. Window listings could convey information about how the system is used.For example, information about application windows could be used identify potential data to collect as well as identifying security tooling ( Security Software Discovery ) to evade.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report weekly-finances-report.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Desktop\85740000

C:\Users\user\Desktop\85740000:Zone.Identifier

C:\Users\user\Desktop\weekly-finances-report.xlsx (copy)

C:\Users\user\Desktop\~$weekly-finances-report.xlsx

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
weekly-finances-report.xlsx