Edit tour

Windows Analysis Report
https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAt

Overview

General Information

Sample URL:	https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nh
Analysis ID:	1545559
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1688,i,18115914345492491375,6791516678454002641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

Acrobat.exe (PID: 1316 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\CampaignStatementCPN-9315437ByCampaignAgent.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 5688 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 5248 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1620,i,10596925692712065524,11621686264154264479,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: file:///C:/Users/user/Downloads/CampaignStatementCPN-9315437ByCampaignAgent.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/CampaignStatementCPN-9315437ByCampaignAgent.pdf	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49954 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: mandrillapp.com to https://cas.campaignagent.com.au/statement/cpn-9315437/pdf/fa718199-2140-4641-8086-b217004395a1?s-token=wgxjyn%2bfjdnjrvmnikuv2sseqawzgap7hqe4upsasys%3d

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ HTTP/1.1Host: mandrillapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /statement/CPN-9315437/pdf/fa718199-2140-4641-8086-b217004395a1?s-token=WgxjYn%2BfJDNjRvMnIkUv2sSeqAWZGAP7hQe4UPsasys%3D HTTP/1.1Host: cas.campaignagent.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NMTn3OpAd22+Zz3&MD=fl2EtoCo HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NMTn3OpAd22+Zz3&MD=fl2EtoCo HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT

Source: global traffic	DNS traffic detected: DNS query: mandrillapp.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cas.campaignagent.com.au
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: 77EC63BDA74BD0D0E0426DC8F80085060.17.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.17.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: ReaderMessages.16.dr	String found in binary or memory: https://www.adobe.co

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49954 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@37/34@8/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\91b42b73-2bc2-4eef-962d-58e9192c94a6.tmp

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 13-53-41-267.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1688,i,18115914345492491375,6791516678454002641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ"
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\CampaignStatementCPN-9315437ByCampaignAgent.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1620,i,10596925692712065524,11621686264154264479,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1688,i,18115914345492491375,6791516678454002641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1620,i,10596925692712065524,11621686264154264479,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://x1.i.lencr.org/	0%	URL Reputation	safe
https://www.adobe.co	0%	URL Reputation	safe
https://chrome.cloudflare-dns.com/dns-query	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
chrome.cloudflare-dns.com	172.64.41.3	true	false	unknown
mandrillapp.com	76.223.125.47	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com	13.211.59.59	true	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown
cas.campaignagent.com.au	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cas.campaignagent.com.au/statement/CPN-9315437/pdf/fa718199-2140-4641-8086-b217004395a1?s-token=WgxjYn%2BfJDNjRvMnIkUv2sSeqAWZGAP7hQe4UPsasys%3D	false		unknown
https://chrome.cloudflare-dns.com/dns-query	false	URL Reputation: safe	unknown
https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ	false		unknown
file:///C:/Users/user/Downloads/CampaignStatementCPN-9315437ByCampaignAgent.pdf	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.17.dr	false	URL Reputation: safe	unknown
https://www.adobe.co	ReaderMessages.16.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.211.59.59	monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
76.223.125.47	mandrillapp.com	United States	16509	AMAZON-02US	false
96.7.168.138	unknown	United States	262589	INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545559
Start date and time:	2024-10-30 17:16:56 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@37/34@8/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.110, 142.250.185.67, 142.251.5.84, 34.104.35.123, 2.16.164.41, 2.16.164.24, 13.85.23.206, 13.95.31.18, 142.250.185.195, 184.28.88.176, 2.23.197.184, 52.202.204.11, 52.5.13.197, 23.22.254.206, 54.227.187.23, 2.16.100.168, 88.221.110.91, 2.19.126.143, 2.19.126.149, 142.250.113.94, 142.250.115.94, 142.251.116.94
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, a767.dspw65.akamai.net, acroipm2.adobe.com, clients2.google.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ

Simulations

Behavior and APIs

Time	Type	Description
13:53:48	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	297
Entropy (8bit):	5.230052304490188
Encrypted:	false
SSDEEP:	6:6D+q2PcNwi2nKuAl9OmbnIFUt8vwZmw+vgVkwOcNwi2nKuAl9OmbjLJ:6avLZHAahFUt8vw/+v454ZHAaSJ
MD5:	FA809E03372391695428A36BBD2C6589
SHA1:	774F27AF7CC1E392A1F773C5AC563418BB33BEFD
SHA-256:	8ABD2DC517A99DB9378EF6B252E1118E1DC32E31FE28EDE028A45461C09CC346
SHA-512:	19BC22879F46DB5231E90BEAD346BC757DEA8FB8FFBC068793F4F8622144CBDD5EBE288A0CA98CF67492EE324D9FAE27EF2A3105B14A1995FB328FB80652A63A
Malicious:	false
Reputation:	low
Preview:	2024/10/30-13:53:39.102 988 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/30-13:53:39.105 988 Recovering log #3.2024/10/30-13:53:39.105 988 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	297
Entropy (8bit):	5.230052304490188
Encrypted:	false
SSDEEP:	6:6D+q2PcNwi2nKuAl9OmbnIFUt8vwZmw+vgVkwOcNwi2nKuAl9OmbjLJ:6avLZHAahFUt8vw/+v454ZHAaSJ
MD5:	FA809E03372391695428A36BBD2C6589
SHA1:	774F27AF7CC1E392A1F773C5AC563418BB33BEFD
SHA-256:	8ABD2DC517A99DB9378EF6B252E1118E1DC32E31FE28EDE028A45461C09CC346
SHA-512:	19BC22879F46DB5231E90BEAD346BC757DEA8FB8FFBC068793F4F8622144CBDD5EBE288A0CA98CF67492EE324D9FAE27EF2A3105B14A1995FB328FB80652A63A
Malicious:	false
Reputation:	low
Preview:	2024/10/30-13:53:39.102 988 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/30-13:53:39.105 988 Recovering log #3.2024/10/30-13:53:39.105 988 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.208025808769343
Encrypted:	false
SSDEEP:	6:64Y9+q2PcNwi2nKuAl9Ombzo2jMGIFUt8vvYJZmw+vvY9VkwOcNwi2nKuAl9OmbX:6F9+vLZHAa8uFUt8vvYJ/+vvY9V54ZHA
MD5:	981259C73A6CAA64780A7127F89460A9
SHA1:	B7BB80E1403D3F619E4F04429E99B341AEC3D041
SHA-256:	AE6180D42073A7C2A44150B677A168F66605FE7D6E3011E2D9450D497A0BAAEC
SHA-512:	3280406790D5406AEFF8F71FB28F0A4455CAFA0994BE4016C68BDB225D74AF77D454580114B0D8AC950D0F81828AC12D73230AF459649018E57AFA32CA0B7FEE
Malicious:	false
Reputation:	low
Preview:	2024/10/30-13:53:39.127 18dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/30-13:53:39.128 18dc Recovering log #3.2024/10/30-13:53:39.128 18dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.208025808769343
Encrypted:	false
SSDEEP:	6:64Y9+q2PcNwi2nKuAl9Ombzo2jMGIFUt8vvYJZmw+vvY9VkwOcNwi2nKuAl9OmbX:6F9+vLZHAa8uFUt8vvYJ/+vvY9V54ZHA
MD5:	981259C73A6CAA64780A7127F89460A9
SHA1:	B7BB80E1403D3F619E4F04429E99B341AEC3D041
SHA-256:	AE6180D42073A7C2A44150B677A168F66605FE7D6E3011E2D9450D497A0BAAEC
SHA-512:	3280406790D5406AEFF8F71FB28F0A4455CAFA0994BE4016C68BDB225D74AF77D454580114B0D8AC950D0F81828AC12D73230AF459649018E57AFA32CA0B7FEE
Malicious:	false
Reputation:	low
Preview:	2024/10/30-13:53:39.127 18dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/30-13:53:39.128 18dc Recovering log #3.2024/10/30-13:53:39.128 18dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\783b1488-b0e5-43cc-8bc0-b5af4df9d8b9.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.969814904260269
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqPsBdOg2HSOgcaq3QYiubSpDyP7E4T3y:Y2sRdsRdMHSOL3QYhbSpDa7nby
MD5:	7BE9C8316EB1B7252CB363207744A145
SHA1:	57861355BE6541501AED40F896891579DCF473BF
SHA-256:	B8F7FC35C094B26B18BB46BB695F1D520904FF063398D86C5B06FD3E20F1881D
SHA-512:	2C7A056CDC3EF05D5E62822CC0BD835FA80CD06131CB76BF559B1D06F735A279C7DCEDE51F1E3A418596573CC960BAFAA038A45966E8007F671F7B6BFFD885DB
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341052428587673","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146366},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.7","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7d45c0a7-e938-4c15-9e60-6701ecacc148.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.979268009514317
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqNasBdOg2HZcaq3QYiubSpDyP7E4T3y:Y2sRdsAfdMHg3QYhbSpDa7nby
MD5:	9208E71B84D19C6EB991770CA00B18EE
SHA1:	25D5D2951E9E92E53E1771B1DF49C3AB981D7DEC
SHA-256:	593B23836E6F828A1A4B7EDFFFCDA70675D6A6BA5DC76AD3BF4ABB23CD096701
SHA-512:	C402BD7B83EA86BC322E05F274C09D0C1FC10DD9735B9FE51D857387465195F74103B139F722A2F328ED2EC19CB8C8EDEE9E96AABA41CB41D32F92C88AB2DC38
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374870830865960","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":219445},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.7","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.969814904260269
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqPsBdOg2HSOgcaq3QYiubSpDyP7E4T3y:Y2sRdsRdMHSOL3QYhbSpDa7nby
MD5:	7BE9C8316EB1B7252CB363207744A145
SHA1:	57861355BE6541501AED40F896891579DCF473BF
SHA-256:	B8F7FC35C094B26B18BB46BB695F1D520904FF063398D86C5B06FD3E20F1881D
SHA-512:	2C7A056CDC3EF05D5E62822CC0BD835FA80CD06131CB76BF559B1D06F735A279C7DCEDE51F1E3A418596573CC960BAFAA038A45966E8007F671F7B6BFFD885DB
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341052428587673","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146366},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.7","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF59e974.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.969814904260269
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqPsBdOg2HSOgcaq3QYiubSpDyP7E4T3y:Y2sRdsRdMHSOL3QYhbSpDa7nby
MD5:	7BE9C8316EB1B7252CB363207744A145
SHA1:	57861355BE6541501AED40F896891579DCF473BF
SHA-256:	B8F7FC35C094B26B18BB46BB695F1D520904FF063398D86C5B06FD3E20F1881D
SHA-512:	2C7A056CDC3EF05D5E62822CC0BD835FA80CD06131CB76BF559B1D06F735A279C7DCEDE51F1E3A418596573CC960BAFAA038A45966E8007F671F7B6BFFD885DB
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341052428587673","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146366},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.7","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.236466485249876
Encrypted:	false
SSDEEP:	96:CwNwpDGHqPySfkcr2smSX8I2OQCDh28wDtPHruoatJVlrgZ:CwNw1GHqPySfkcigoO3h28ytPLuoatJq
MD5:	E0883969C9068484F9756352AA14BE4C
SHA1:	1FF70D3C1CD8ACA9544266315AEB019B1AB809B5
SHA-256:	605FD2EEBE27E8400BA4DA07B6ECF94916DDF71921447A6CCDD3A4E126849F98
SHA-512:	5A34CD5739CE0BD22FAE141FB8F4A92E0BF89884C72532266B9222C841156416E34283454A1DFDAE0FC7E986D5DA07D81A415F7C05A6C950A542E8D946D38976
Malicious:	false
Reputation:	low
Preview:	...#................version.1..namespace-.aw.o................next-map-id.1.Pnamespace-aa11265e_f35e_4e5d_85db_f163e1c0f691-https://rna-resource.acrobat.com/.0I.$.r................next-map-id.2.Snamespace-9a9aa6d6_c307_4dda_b6c0_dc91084c8e68-https://rna-v2-resource.acrobat.com/.1!...r................next-map-id.3.Snamespace-1fbd9dc5_70a3_4975_91b4_966e0915c27a-https://rna-v2-resource.acrobat.com/.2..N.o................next-map-id.4.Pnamespace-0e0aed8d_6d6f_4be0_b28f_8e02158bc792-https://rna-resource.acrobat.com/.3.z.o................next-map-id.5.Pnamespace-52652c26_09c2_43f2_adf7_da56a1f00d32-https://rna-resource.acrobat.com/.4.{.^...............Pnamespace-aa11265e_f35e_4e5d_85db_f163e1c0f691-https://rna-resource.acrobat.com/.C..r................next-map-id.6.Snamespace-3a89c6b0_72b9_411a_9e44_fa247f34ac91-https://rna-v2-resource.acrobat.com/.5.q._r................next-map-id.7.Snamespace-02b23955_9103_42e0_ba64_3f8683969652-https://rna-v2-resource.acrobat.com/.6..d.o..............

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.211378773875729
Encrypted:	false
SSDEEP:	6:64N9+q2PcNwi2nKuAl9OmbzNMxIFUt8vTuYJZmw+vHUjh39VkwOcNwi2nKuAl9Ob:6K9+vLZHAa8jFUt8vTvJ/+vHUV9V54Zv
MD5:	4DA4439DAB12FAF693333CB5483E7A48
SHA1:	011042713C8AB833292BA686730183A40A144FB6
SHA-256:	C89E9FDDA9F324911A88E14D7A2D3BB5C2D51298928217793872D07EAC3F20BF
SHA-512:	FA804998ADA38DC2C963619A68FE53B8B7FB97990B2E4C0184B12E723EF8F9E70F789E0682945761586E98DD12A8463E06960E8288125AAA6CCD8F86E2D1BD64
Malicious:	false
Reputation:	low
Preview:	2024/10/30-13:53:39.531 18dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/30-13:53:39.640 18dc Recovering log #3.2024/10/30-13:53:40.144 18dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.211378773875729
Encrypted:	false
SSDEEP:	6:64N9+q2PcNwi2nKuAl9OmbzNMxIFUt8vTuYJZmw+vHUjh39VkwOcNwi2nKuAl9Ob:6K9+vLZHAa8jFUt8vTvJ/+vHUV9V54Zv
MD5:	4DA4439DAB12FAF693333CB5483E7A48
SHA1:	011042713C8AB833292BA686730183A40A144FB6
SHA-256:	C89E9FDDA9F324911A88E14D7A2D3BB5C2D51298928217793872D07EAC3F20BF
SHA-512:	FA804998ADA38DC2C963619A68FE53B8B7FB97990B2E4C0184B12E723EF8F9E70F789E0682945761586E98DD12A8463E06960E8288125AAA6CCD8F86E2D1BD64
Malicious:	false
Reputation:	low
Preview:	2024/10/30-13:53:39.531 18dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/30-13:53:39.640 18dc Recovering log #3.2024/10/30-13:53:40.144 18dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241030175345Z-231.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	0.6431450389946705
Encrypted:	false
SSDEEP:	96:epOo5kSv8Cd11/Sl0ebzOLeMcp5s9eY18tzIresU4Y:epOEv8CdDi7jpSy
MD5:	8D46683A18D340451BD80F0BBFE1662B
SHA1:	CEDE93BB30FC00A4D5D7F0DA2289F5A5DAECC3D8
SHA-256:	A96E11E82EAC65A952DE7757F490FDEAB1B766222F9EB94D631AAB0F61127352
SHA-512:	7D58E55126A67F0EDF1303532C2FE0D55DCAA79B3A15267D6FE140D90CFD467CB1F8831BBD04D68BF5B6FE2569AA2AC61160DA4D216A37E2D9E721149FAF72C5
Malicious:	false
Reputation:	low
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.438984995866535
Encrypted:	false
SSDEEP:	384:yeaci5GziBA7vEmzKNURFXoD1NC1SK0gkzPlrFzqFK/WY+lUTTcKqZ5bEmzVz:1TurVgazUpUTTGt
MD5:	3535ED686F0CF6096CD76A042FB53E45
SHA1:	14E15396F971AB2D9DA49C8AE366DE7F3A300183
SHA-256:	532B56014E730B6681F75FD601A0B23562A6D1737C0B80878E65504A90A6D002
SHA-512:	824A3BBAFF6E3A73EFC1B7BE890555269470FCD9D81629687CC940F804D87F62CB22F7308F6359FB1CA3355556B429DBC6610479D1D6C382F37BFC311FFA2AB6
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7717064639548106
Encrypted:	false
SSDEEP:	48:7M0p/E2ioyVfSioy3DoWoy1CABoy1MhKOioy1noy1AYoy1Wioy1hioybioyeooy/:7HpjuK0iAmXKQGivb9IVXEBodRBkQ
MD5:	7607DAD5D2B4CFD1079B8D4E505E2D03
SHA1:	C7CABF2E0B7F4F5F52C12A0A20A0FD29B8CED680
SHA-256:	2F833C7BB3E8DC760BA440FE0EA8018E632641426D8CEEA31A8AC87D942363E0
SHA-512:	8CC08CF2D9F6FCB29FAE16FA6FFF856C39212E64CB17FF3DB85456E826F9F115E7AD8ECE02F86F71B7CB61ADD0047A4658051B48F4145592DFE01E69A5B29D83
Malicious:	false
Reputation:	low
Preview:	.... .c...... +................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Reputation:	low
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Reputation:	low
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7569015731729736
Encrypted:	false
SSDEEP:	3:kkFkl3i+PbNl1fllXlE/HT8kwltNNX8RolJuRdxLlGB9lQRYwpDdt:kK/I2T8DNMa8RdWBwRd
MD5:	44CD8E0F23C5D6B924633E07D504B81A
SHA1:	E13B36A6B3134B02D4C71016A8CA2D91D6266736
SHA-256:	8919787A2E8F5EADDE85C55A4805FE982F0FB12F59BF8F0CD798778FB578BFA5
SHA-512:	D3E2DB02DF170BBF1B1EC85C487EE48CC5BEBC8379721FBCFED04FA82B49D5715A5BD23D07729A1BC3AF01906C0E6FA1B8C20819CF1CB0896FC1AA190339A5D1
Malicious:	false
Reputation:	low
Preview:	p...... ........D...*..(....................................................... ..........W....q...............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.150184159866505
Encrypted:	false
SSDEEP:	6:kKwLD9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:Y2DnLNkPlE99SNxAhUe/3
MD5:	393CF75AA2A1E4415F5C565686F439F6
SHA1:	73556B6CEDE1201D1B659DA5A5071B8A718B9EF7
SHA-256:	57346587AF21B79133EE02CBBCD4E2A84C1BC19C146252681DFBF427B335FE83
SHA-512:	51F87F0C12E4DAA48419CDB7B6876DE384C2FEADD5A30B933F14498AA306DE90ACED7B8A5557BEFCD80C2755D1EDEA106FD2850BD7AEE158DE85CA1D84089D92
Malicious:	false
Reputation:	low
Preview:	p...... .............*..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Reputation:	low
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2145
Entropy (8bit):	5.081502268266321
Encrypted:	false
SSDEEP:	48:Y/8YvXvwvfb7ACHaECU6akn2ZqijwiIE0O:Kfif4oh612ZdXrz
MD5:	433BE31DB24165F1CBBADDD48FE2BCF6
SHA1:	2CC4C0CED1E34B2EA24C823ACB7F19F6733A92B6
SHA-256:	916E8A10012DDE8BDEF7A0FD67EE9F5B7BE963A237DFE4F4272E9CAF64F6BF40
SHA-512:	780897F45A50D2C4BDECAAC6B4881D5A27938F94E852D890469DC9549F1265F5A7D10EEE9BF151B26A57A11D74D5A78F8409456C9D54B2C9D0E8F56BD615CC8E
Malicious:	false
Reputation:	low
Preview:	{"all":[{"id":"TESTING","info":{"dg":"DG","sid":"TESTING"},"mimeType":"file","size":4,"ts":1730310822000},{"id":"DC_FirstMile_Right_Sec_Surface","info":{"dg":"600435bc6c3bfd6739f3c39b93bb45a3","sid":"DC_FirstMile_Right_Sec_Surface"},"mimeType":"file","size":294,"ts":1696492435000},{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"5c23293c742ed52b97ce6913651e2bac","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696492429000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"1281d7dbf4238170aa87c435aca63c66","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1696492423000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"824a4ec59c469b030f3b98175cf76e67","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1255,"ts":1696491691000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"9e3dce9d3ce52b8c98d60243d5cf7aa0","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1250,"ts":1696491691000},{"id":"DC_Reader_Edit_LHP_Banner"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.4530380413495971
Encrypted:	false
SSDEEP:	48:TGufl2GL7msCvrBd6dHtbGIbPe0K3+fDy2dsix3l4xr:lNVmsw3SHtbDbPe0K3+fDZdfsr
MD5:	0782B226679CE2439EC7EBC5A15B825D
SHA1:	857B6C5EBCCE57E35A5217BDD5549229BC55BECA
SHA-256:	1594521D43C654BCEB4275E08A8ED1F15A103E4C86A1C581F5F402DBA59C9B35
SHA-512:	C9C1BE704249B526CF420DF9BA7AFB75C7395DF6321617EF3FDD87750BC1431FEB53ABA72B7C7E9BA5CC8A47DC9139F3B65DD3E7B631F2534906992C3F9F922C
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.9572635393579854
Encrypted:	false
SSDEEP:	48:7MrrvrBd6dHtbGIbPe0K3+fDy2dsixO/qFl2GL7msE:7u3SHtbDbPe0K3+fDZdfeKVmsE
MD5:	DCB77A75E11C537A5A85BCE6B24AE601
SHA1:	14FE618B8227BD0E9984AE1C34834C91B8331346
SHA-256:	E7B27E368FEF36DF76722D5C3D086C102E03DC4E420677209071894AB8AC1E29
SHA-512:	5B42F89BA45D4DEF983D76A464C85615358F0AD6A0800C32213897B8AE904E057F34F836602F3E60A129231436046405BB164D2242598A34C1B3DAC32EDA91E3
Malicious:	false
Reputation:	low
Preview:	.... .c......m........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................v.../.././././....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI9b14d.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5329345335875004
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K84Oqzw:Qw946cPbiOxDlbYnuRKQ
MD5:	F409F9FE3F9175D4109A0122BB93A634
SHA1:	BE3B3FA05E72D8FD30A7C7B5FACFF0E06246B5B5
SHA-256:	C06F88FB3E6AB11811DD4C89F28CA81139D256B829CA675509F18AE96E33A30A
SHA-512:	DAEA7543D853AA3B853F5C39EC75BA806EA587AEAA7AACD1357CA4C347B4B4C5F371212E8BCC046E2E8F5491921DF50C07465ABBF1AC2CDC3003472BC3FC58CE
Malicious:	false
Reputation:	low
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.0./.1.0./.2.0.2.4. . .1.3.:.5.3.:.4.8. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 13-53-41-267.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.386483451061953
Encrypted:	false
SSDEEP:	384:A2+jkjVj8jujXj+jPjghjKj0jLjmF/FRFO7t75NsXNsbNsgNssNsNNsaNsliNsTY:AXg5IqTS7Mh+oXChrYhFiQHXiz1W60ID
MD5:	F49CA270724D610D1589E217EA78D6D1
SHA1:	22D43D4BB9BDC1D1DEA734399D2D71E264AA3DD3
SHA-256:	D2FFBB2EF8FCE09991C2EFAA91B6784497E8C55845807468A3385CF6029A2F8D
SHA-512:	181B42465DE41E298329CBEB80181CBAB77CFD1701DBA31E61B2180B483BC35E2EFAFFA14C98F1ED0EDDE67F997EE4219C5318CE846BB0116A908FB2EAB61D29
Malicious:	false
Reputation:	low
Preview:	SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:808+0200 ThreadID=6044 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f1c78126-6a87-4f56-987d-4547733fd5ac.1696492435808 Timestamp=2023-10-05T09:53:55:809+0200 ThreadID=6044 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.332739328695824
Encrypted:	false
SSDEEP:	384:mlu4y4H4q4W474SD4f4A4Y4F4HbGbVQbKln1lnv0t0/X+XWX9X6XiRKabrbbbJby:mgBy5zgTDoJn4Wy5QWnhUoumNqopfHdu
MD5:	F9671D1FE29CAE083101CFFE41E9A3FE
SHA1:	1FB0CA7AB5FD12431E6073574BC091D7300FF576
SHA-256:	21B4438D7C09FBFF36B69A5F37F3DF64448BC805FE9F1ADD5C519804DCA74010
SHA-512:	96F9D70F6EADE572D76F1F0586356EBEFF20485DDE56ED0CE282E0274BCD628C9EFFF38D0F7A7D87AA1911CB19E1941AA7D2FE9A3016D113969E105066A663C6
Malicious:	false
Reputation:	low
Preview:	SessionID=8ae32d07-70db-48f7-af60-74f537cfcfe8.1730310821282 Timestamp=2024-10-30T13:53:41:282-0400 ThreadID=1468 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=8ae32d07-70db-48f7-af60-74f537cfcfe8.1730310821282 Timestamp=2024-10-30T13:53:41:283-0400 ThreadID=1468 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=8ae32d07-70db-48f7-af60-74f537cfcfe8.1730310821282 Timestamp=2024-10-30T13:53:41:283-0400 ThreadID=1468 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=8ae32d07-70db-48f7-af60-74f537cfcfe8.1730310821282 Timestamp=2024-10-30T13:53:41:283-0400 ThreadID=1468 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=8ae32d07-70db-48f7-af60-74f537cfcfe8.1730310821282 Timestamp=2024-10-30T13:53:41:283-0400 ThreadID=1468 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	35721
Entropy (8bit):	5.4080635085991
Encrypted:	false
SSDEEP:	768:hRDD/ATOlQwlgR6RgRT4xk1Bh9+R6gRldy0+AyxkHBDgRh9gR2WbFXJGL0WA3m2B:hRDD/ATOlQwlgR6RgRT4xk1Bh9+R6gR3
MD5:	5DADFE416ACBB4CB0F802E6A98C83ACB
SHA1:	987E09CCB55539CFD4AE16A7545BFD50E1C9762A
SHA-256:	6BE1CF27E525F491460B4FFE5664A3B6D02EAC0AC5ED05614D6F16E6F72B8C12
SHA-512:	0F4C53E075221619EA63AF1C63BB518DCE53178206E03903FEA1644431303F527B14930D400975BEB17B6DA2A2253FA28FCBD8BEFB694929111907154F430D02
Malicious:	false
Reputation:	low
Preview:	05-10-2023 08:41:17:.---2---..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : *************************************..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : ***********************************..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : Starting NGL..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..05-10-2023 08:41:17:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..05-10-2023 08:41:17:.Closing File..05-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\2fe53555-8a45-4f78-b6d6-689a03bf606d.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/nZwYIGNPgeWL07oYGZ1dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:fZwZG/WLxYGZN3mlind9i4ufFXpAXkru
MD5:	1F3D69524A9D7E17BD2363C81D130F1A
SHA1:	C2A4A08839CBA47BEE2B601975F7C4F0CC191091
SHA-256:	D0FFBEC8502A0BE88A99F6708987658FEBE4CF3B6B79AF219C53EFF6458F9D9D
SHA-512:	A4CBE7073A7CB4C5E33E1CD903CCD7F24B78A04C037BFA1D90D9A5BBD12AF60E3DFFD6546277D1B765CA1DAC1CDA28D24D3454C81952B72D97CAF84DF395E99A
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\6f55c010-f5cf-4b5e-a2e6-5c17383aa54a.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Reputation:	low
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\9f3380ea-ed8e-45aa-8e22-48161520a3d5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Reputation:	low
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\e2deb9e2-0889-4729-8e01-2929455f4fce.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\Downloads\51558a0d-89ab-4137-9733-8e51da9b3353.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	127821
Entropy (8bit):	7.94825119622355
Encrypted:	false
SSDEEP:	3072:DUI5dsBQltLiLiLiLiLiLiLiLiLiLofO6Od+riYPvfNQdfdI25MY1vwG:DUGdFltLiLiLiLiLiLiLiLiLiL+Od8if
MD5:	8BC763572ED98D45ADA285BA40B14195
SHA1:	0BB2B52D75CBB130C2BA110BEDF5BE434D66C7DD
SHA-256:	D62F3329FCC0AD6ED8025DB5555C14A6DDFE0B46693BA64DA3703B7BBCA68530
SHA-512:	00ED2AC0C579AF77B0859B85C3B2FD409B9EEB58E35FB39248AFDFE70C1032DEE2FA6155059F4C0E4A829ECF4647D6296DFE4EB48DD9ADCC509D07C7C87DECF5
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4..%......%..1 0 obj..<<../Pages 2 0 R../Type /Catalog../ViewerPreferences 3 0 R../Dests 4 0 R../PageMode /UseNone../PageLayout /OneColumn..>>....endobj..2 0 obj..<<../Count 1../Type /Pages../Kids [5 0 R]..>>....endobj..5 0 obj..<<../Contents [6 0 R 7 0 R]../Type /Page../Resources <<../ProcSet [/PDF /Text /ImageC]../XObject <<../lhficgcoggcakpomojjnidijjdkbikbp 8 0 R../clgnlbcanfdckkoibiajfcpnhmenbplf 9 0 R..>>....>>..../Parent 2 0 R../MediaBox [0.00000 0.00000 595.00000 842.00000]..>>....endobj..6 0 obj..<<../Length 127../Filter /FlateDecode..>>..stream..x^M.1..0...........;.`b..M.....(...._.z.V....#U.S.<....V.?....Wr...Rv..3..,.....kH....+..i.t../g...GX.......B.B.P..Z./.~-H..endstream....endobj..7 0 obj..<<../Length 100../Filter /FlateDecode..>>..stream..x^e.;.. .D.M..{....{/`e..(.............J.!..+..5#.$..\|."....2....9S.q.h..8..[o6..i.{DG..0 ..."...endstream....endobj..3 0 obj..<<../FitWindow false../CenterWindow false../DisplayDocTitle false../NonFullScreenBehavior

C:\Users\user\Downloads\91b42b73-2bc2-4eef-962d-58e9192c94a6.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	965
Entropy (8bit):	6.1813895688382186
Encrypted:	false
SSDEEP:	24:gRTNFOoYaaasSSpIZPhqClW3Ndpcwwt8rWZspRtwOhm3:gn8oErvCaowwt0GwRt9m3
MD5:	CAFBB094154A473AAAC0905F5A89C5B2
SHA1:	9A0BE156997CA26768BFF3B978495A51C503085A
SHA-256:	D67317B65AD1DD51D43EBBCF967AA84E7E5236C3705F471948AE4F3E1B41349A
SHA-512:	5702832056421C1E3C5C78D50F77E70AF58F617C3EBE6A6F10F731E3BF72A7740FEE1DBE7DF254EFDC47F4A291AF01CF64F6894984BD3E53BBC0A88382083F2E
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4..%......%..1 0 obj..<<../Pages 2 0 R../Type /Catalog../ViewerPreferences 3 0 R../Dests 4 0 R../PageMode /UseNone../PageLayout /OneColumn..>>....endobj..2 0 obj..<<../Count 1../Type /Pages../Kids [5 0 R]..>>....endobj..5 0 obj..<<../Contents [6 0 R 7 0 R]../Type /Page../Resources <<../ProcSet [/PDF /Text /ImageC]../XObject <<../lhficgcoggcakpomojjnidijjdkbikbp 8 0 R../clgnlbcanfdckkoibiajfcpnhmenbplf 9 0 R..>>....>>..../Parent 2 0 R../MediaBox [0.00000 0.00000 595.00000 842.00000]..>>....endobj..6 0 obj..<<../Length 127../Filter /FlateDecode..>>..stream..x^M.1..0...........;.`b..M.....(...._.z.V....#U.S.<....V.?....Wr...Rv..3..,.....kH....+..i.t../g...GX.......B.B.P..Z./.~-H..endstream....endobj..7 0 obj..<<../Length 100../Filter /FlateDecode..>>..stream..x^e.;.. .D.M..{....{/`e..(.............J.!..+..5#.$..\|."....2....9S.q.h..8..[o6..i.{DG..0 ..."...endstream....endobj..3 0 obj..<<../FitWindow false../CenterWindow false../DisplayDoc

C:\Users\user\Downloads\CampaignStatementCPN-9315437ByCampaignAgent.pdf (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	127821
Entropy (8bit):	7.94825119622355
Encrypted:	false
SSDEEP:	3072:DUI5dsBQltLiLiLiLiLiLiLiLiLiLofO6Od+riYPvfNQdfdI25MY1vwG:DUGdFltLiLiLiLiLiLiLiLiLiL+Od8if
MD5:	8BC763572ED98D45ADA285BA40B14195
SHA1:	0BB2B52D75CBB130C2BA110BEDF5BE434D66C7DD
SHA-256:	D62F3329FCC0AD6ED8025DB5555C14A6DDFE0B46693BA64DA3703B7BBCA68530
SHA-512:	00ED2AC0C579AF77B0859B85C3B2FD409B9EEB58E35FB39248AFDFE70C1032DEE2FA6155059F4C0E4A829ECF4647D6296DFE4EB48DD9ADCC509D07C7C87DECF5
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4..%......%..1 0 obj..<<../Pages 2 0 R../Type /Catalog../ViewerPreferences 3 0 R../Dests 4 0 R../PageMode /UseNone../PageLayout /OneColumn..>>....endobj..2 0 obj..<<../Count 1../Type /Pages../Kids [5 0 R]..>>....endobj..5 0 obj..<<../Contents [6 0 R 7 0 R]../Type /Page../Resources <<../ProcSet [/PDF /Text /ImageC]../XObject <<../lhficgcoggcakpomojjnidijjdkbikbp 8 0 R../clgnlbcanfdckkoibiajfcpnhmenbplf 9 0 R..>>....>>..../Parent 2 0 R../MediaBox [0.00000 0.00000 595.00000 842.00000]..>>....endobj..6 0 obj..<<../Length 127../Filter /FlateDecode..>>..stream..x^M.1..0...........;.`b..M.....(...._.z.V....#U.S.<....V.?....Wr...Rv..3..,.....kH....+..i.t../g...GX.......B.B.P..Z./.~-H..endstream....endobj..7 0 obj..<<../Length 100../Filter /FlateDecode..>>..stream..x^e.;.. .D.M..{....{/`e..(.............J.!..+..5#.$..\|."....2....9S.q.h..8..[o6..i.{DG..0 ..."...endstream....endobj..3 0 obj..<<../FitWindow false../CenterWindow false../DisplayDocTitle false../NonFullScreenBehavior

C:\Users\user\Downloads\CampaignStatementCPN-9315437ByCampaignAgent.pdf.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.4, 1 pages
Category:	dropped
Size (bytes):	127821
Entropy (8bit):	7.94825119622355
Encrypted:	false
SSDEEP:	3072:DUI5dsBQltLiLiLiLiLiLiLiLiLiLofO6Od+riYPvfNQdfdI25MY1vwG:DUGdFltLiLiLiLiLiLiLiLiLiL+Od8if
MD5:	8BC763572ED98D45ADA285BA40B14195
SHA1:	0BB2B52D75CBB130C2BA110BEDF5BE434D66C7DD
SHA-256:	D62F3329FCC0AD6ED8025DB5555C14A6DDFE0B46693BA64DA3703B7BBCA68530
SHA-512:	00ED2AC0C579AF77B0859B85C3B2FD409B9EEB58E35FB39248AFDFE70C1032DEE2FA6155059F4C0E4A829ECF4647D6296DFE4EB48DD9ADCC509D07C7C87DECF5
Malicious:	false
Reputation:	low
Preview:	%PDF-1.4..%......%..1 0 obj..<<../Pages 2 0 R../Type /Catalog../ViewerPreferences 3 0 R../Dests 4 0 R../PageMode /UseNone../PageLayout /OneColumn..>>....endobj..2 0 obj..<<../Count 1../Type /Pages../Kids [5 0 R]..>>....endobj..5 0 obj..<<../Contents [6 0 R 7 0 R]../Type /Page../Resources <<../ProcSet [/PDF /Text /ImageC]../XObject <<../lhficgcoggcakpomojjnidijjdkbikbp 8 0 R../clgnlbcanfdckkoibiajfcpnhmenbplf 9 0 R..>>....>>..../Parent 2 0 R../MediaBox [0.00000 0.00000 595.00000 842.00000]..>>....endobj..6 0 obj..<<../Length 127../Filter /FlateDecode..>>..stream..x^M.1..0...........;.`b..M.....(...._.z.V....#U.S.<....V.?....Wr...Rv..3..,.....kH....+..i.t../g...GX.......B.B.P..Z./.~-H..endstream....endobj..7 0 obj..<<../Length 100../Filter /FlateDecode..>>..stream..x^e.;.. .D.M..{....{/`e..(.............J.!..+..5#.$..\|."....2....9S.q.h..8..[o6..i.{DG..0 ..."...endstream....endobj..3 0 obj..<<../FitWindow false../CenterWindow false../DisplayDocTitle false../NonFullScreenBehavior

Static File Info

⊘No static file info

File Icon


Icon Hash:	b29a8a8e86868381

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 17:17:53.080140114 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 17:17:57.096299887 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:17:57.470660925 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:17:57.892528057 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 17:17:58.220673084 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:17:59.720664978 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:18:00.706945896 CET	49672	443	192.168.2.7	104.98.116.138
Oct 30, 2024 17:18:00.741708994 CET	49675	443	192.168.2.7	104.98.116.138
Oct 30, 2024 17:18:02.729825020 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:18:03.116080999 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.116132021 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.116199970 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.116385937 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.116424084 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.116477013 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.116628885 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.116641045 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.116918087 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.116931915 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.792841911 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.795376062 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.844741106 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.847708941 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.878127098 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.878143072 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.879492044 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.879501104 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.879559994 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.880928993 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.880954981 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.882282019 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.882301092 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.882348061 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.913893938 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.914102077 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.915822983 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.915940046 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.915954113 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.915963888 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:03.971012115 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.971209049 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:03.971221924 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:04.019159079 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:04.170233011 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:04.170340061 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:04.170423031 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:04.251169920 CET	49705	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:04.251193047 CET	443	49705	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:04.260899067 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:04.260945082 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:04.261125088 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:04.261435986 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:04.261445999 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:04.348356962 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:04.348393917 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:04.348448992 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:04.349344969 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:04.349358082 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.131261110 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:05.131797075 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:05.131820917 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:05.132869959 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:05.132944107 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:05.135481119 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:05.135544062 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:05.191668987 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:05.191685915 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:05.238332987 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:05.644664049 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.645469904 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:05.645488024 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.646621943 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.646684885 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:05.723323107 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:05.723323107 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:05.723346949 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.723521948 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.771569967 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:05.771580935 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:05.815838099 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:06.481822014 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:06.481849909 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:06.481918097 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:06.482852936 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:06.482862949 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:06.861649990 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:06.861689091 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:06.861772060 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:06.880582094 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:06.880600929 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:07.502721071 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.502765894 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 17:18:07.503041029 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.512130976 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.512154102 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.512403011 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.531236887 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.575333118 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.720443964 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:07.720515966 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:07.727081060 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:07.727093935 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:07.727410078 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:07.742669106 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.742702007 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.742783070 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.742783070 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.742827892 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.742862940 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.742899895 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.768264055 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:07.790913105 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.790941000 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.790988922 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.791002989 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.791050911 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.823340893 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:07.861644030 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.861684084 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.861741066 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.861752987 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.861816883 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.867336988 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:07.909080029 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.909113884 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.909167051 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.909183025 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.909213066 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.909234047 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.910768032 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.910797119 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.910845995 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.910854101 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.910887003 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.910906076 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.912568092 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.912589073 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.912642956 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.912653923 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.912682056 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.912698030 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.980964899 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.980999947 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.981084108 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.981111050 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:07.981131077 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:07.981159925 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.027235985 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.027257919 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.027343035 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.027362108 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.027395010 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.028188944 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.028203964 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.028287888 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.028295040 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.028685093 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.029030085 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.029045105 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.029095888 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.029102087 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.029153109 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.030535936 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.030555964 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.030603886 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.030610085 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.030637980 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.030656099 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.031550884 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.031564951 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.031609058 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.031615019 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.031641960 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.031660080 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.032609940 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.032624960 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.032680035 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.032685041 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.032797098 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.064811945 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:08.064883947 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:08.064955950 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:08.068490028 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:08.068514109 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:08.068532944 CET	49711	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:08.068538904 CET	443	49711	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:08.099628925 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.099704027 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.099726915 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.099786043 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.101567984 CET	49710	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.101577997 CET	443	49710	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.233274937 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.233341932 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.233465910 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.234436989 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.234483004 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.234601974 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.240394115 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.240430117 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.240499020 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.242891073 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.242918968 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.243248940 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.245419025 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:08.245429039 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:08.245534897 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:08.246035099 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.246054888 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.246505022 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.246519089 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.246927023 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.246938944 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.247601032 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.247610092 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.248353004 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:08.248363972 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:08.249629021 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.249658108 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.249721050 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.249849081 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.249856949 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.692043066 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:18:08.725346088 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.725410938 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.725419044 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.770438910 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.907277107 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.907289028 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.907326937 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.907334089 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.907366037 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.907388926 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.907398939 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.907437086 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.907474995 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.908617973 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.908626080 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.908706903 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.908823013 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.908827066 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.909292936 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.909357071 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.909377098 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:08.951340914 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:08.964927912 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.970544100 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.977376938 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.980595112 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.994374037 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.996922016 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.996947050 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.997499943 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.997504950 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.997792959 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.997823000 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.998408079 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.998414993 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.998817921 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.998828888 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.999244928 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.999248981 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:08.999540091 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:08.999552965 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.000119925 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.000125885 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.000456095 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.000478029 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.002463102 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.002469063 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.089243889 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.089257956 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.089303017 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.089309931 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.089325905 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.089385033 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.089385033 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.089392900 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.089647055 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.090152979 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.090219975 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.090221882 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.090230942 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.090298891 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.090306044 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.091788054 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.091861010 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.091875076 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.091881037 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.091937065 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.091943979 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.092026949 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.097342968 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.097440958 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:09.122805119 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.122832060 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.122885942 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.122889042 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.122934103 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.127574921 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.127578974 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.127599001 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.127657890 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.127660990 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.127674103 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.127713919 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.127713919 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.128324032 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.128396988 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.128451109 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.128463984 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.128520966 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.128566980 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.129101992 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.129230976 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.129296064 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.157829046 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:09.157849073 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.158391953 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.158416986 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.158416986 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.158431053 CET	49712	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.158437967 CET	443	49712	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.158449888 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.158473015 CET	49717	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.158480883 CET	443	49717	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.158570051 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.161041975 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:09.162126064 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.162147045 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.162163019 CET	49715	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.162168980 CET	443	49715	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.162209034 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.162214041 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.162239075 CET	49713	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.162242889 CET	443	49713	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.162482023 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.162487984 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.162513971 CET	49714	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.162517071 CET	443	49714	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.166233063 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.166275978 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.166834116 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.169676065 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.169713974 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.169774055 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.170147896 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.170166016 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.171125889 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.171152115 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.172252893 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.172286034 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.172365904 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.172509909 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.172523022 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.180887938 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.180918932 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.180978060 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.181441069 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.181463003 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.181521893 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.181771040 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.181782961 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.182049990 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.182063103 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.203330994 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.271035910 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271068096 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271117926 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271142006 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.271158934 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271218061 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.271234035 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.271899939 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271924019 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271960020 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.271966934 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.271977901 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.272017002 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.272038937 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.272043943 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.272063017 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.272114992 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.272286892 CET	49709	443	192.168.2.7	13.211.59.59
Oct 30, 2024 17:18:09.272300959 CET	443	49709	13.211.59.59	192.168.2.7
Oct 30, 2024 17:18:09.414454937 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.414524078 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.414575100 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:09.416917086 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:09.416929007 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.416940928 CET	49716	443	192.168.2.7	184.28.90.27
Oct 30, 2024 17:18:09.416945934 CET	443	49716	184.28.90.27	192.168.2.7
Oct 30, 2024 17:18:09.904838085 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.906691074 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.906712055 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.907310009 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.907320976 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.909312963 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.910032988 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.910044909 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.910901070 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.910907984 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.920739889 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.921194077 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.921273947 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.921636105 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.921650887 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.928958893 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.929359913 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.929378986 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.929869890 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.929876089 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.959763050 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.969872952 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.969894886 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:09.970484018 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:09.970494032 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.033562899 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.033663988 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.033754110 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.040216923 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.040275097 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.040484905 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.053102016 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.053142071 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.053157091 CET	49722	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.053164005 CET	443	49722	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.054665089 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.054678917 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.054692984 CET	49720	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.054697990 CET	443	49720	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.056821108 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.057183981 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.057444096 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.099179029 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.099217892 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.099318027 CET	49718	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.099323988 CET	443	49718	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.102828979 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.103450060 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.103508949 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.112755060 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.112771988 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.112786055 CET	49719	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.112792015 CET	443	49719	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.162942886 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.162986994 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.163142920 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.206851959 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.206888914 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.207015991 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.207045078 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.207129955 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.209259987 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.209292889 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.209374905 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.209834099 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.209856033 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.233210087 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.233242035 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.233342886 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.233496904 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.233513117 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:10.233740091 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:10.233766079 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.013847113 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.018980980 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.036216974 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.036231041 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.036725998 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.036731005 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.040363073 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.040391922 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.041183949 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.041199923 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.045547962 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.045923948 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.045954943 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.046396017 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.046401978 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.067631006 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.069072008 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.069098949 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.069818974 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.069828033 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.164376020 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.164845943 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.164900064 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.176444054 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.176501989 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.176558971 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.180804968 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.181668997 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.181727886 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.198071003 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.198123932 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.198184967 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.199594975 CET	49721	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.199608088 CET	443	49721	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.200246096 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.200246096 CET	49723	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.200252056 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.200262070 CET	443	49723	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.213717937 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.213726044 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.213740110 CET	49725	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.213745117 CET	443	49725	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.214112997 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.214112997 CET	49726	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.214143038 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.214154959 CET	443	49726	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.224149942 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.224162102 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.224235058 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.226492882 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.226500034 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.226507902 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.226557016 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.226563931 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.226603031 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.234599113 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.234637976 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.234695911 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.250258923 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.250268936 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.251307011 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.251324892 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.251339912 CET	49724	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.251343966 CET	443	49724	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.254240990 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.254250050 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.254702091 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.254723072 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.338026047 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.338040113 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.338107109 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.358160019 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.358200073 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.358280897 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.466237068 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.466253996 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:11.467525005 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:11.467554092 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.063023090 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.071880102 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.071892977 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.072371960 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.072376013 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.075450897 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.077531099 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.077543974 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.078197002 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.078202963 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.078551054 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:12.078578949 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:12.078819036 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:12.081810951 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:12.081820965 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:12.098740101 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.101788044 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.101800919 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.102294922 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.102299929 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.245186090 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.245269060 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.245520115 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.246462107 CET	49728	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.246475935 CET	443	49728	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.248528004 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.248580933 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.248629093 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.248975992 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.249000072 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.249011040 CET	49729	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.249017000 CET	443	49729	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.251008987 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.251063108 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.251132965 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.265445948 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.265477896 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.265639067 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.265897989 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.265932083 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.270754099 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.270816088 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.270941973 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.282227993 CET	49727	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.282233000 CET	443	49727	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.292314053 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.292330980 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.294234991 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.294735909 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.295635939 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.295648098 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.295787096 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.295802116 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.296178102 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.296181917 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.296521902 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.296526909 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.317429066 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.317482948 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.317548037 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.318171024 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.318190098 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.442969084 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.443028927 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.443106890 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.443444967 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.443444967 CET	49730	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.443453074 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.443461895 CET	443	49730	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.447814941 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.447869062 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.447936058 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.473157883 CET	49731	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.473181009 CET	443	49731	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.481151104 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.481179953 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.481283903 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.482027054 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.482034922 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.483494043 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.483555079 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:12.483612061 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.483935118 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:12.483944893 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.053641081 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.084897041 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.092128038 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.178845882 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.187309027 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.187331915 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.187998056 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.188003063 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.188462973 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.188474894 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.188900948 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.188906908 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.189251900 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.189264059 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.189872980 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.189877033 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.256963968 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.260387897 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.260421991 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.260518074 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.260925055 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.260934114 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.261301041 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.261341095 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.261759043 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.261765003 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.264806986 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:13.264878988 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:13.287266970 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:13.287286997 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:13.287597895 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:13.315579891 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.315726042 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.315956116 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.315970898 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.316045046 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.316163063 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.319032907 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.319430113 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.319509983 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.324400902 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.324434042 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.324451923 CET	49735	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.324460030 CET	443	49735	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.324912071 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.324912071 CET	49734	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.324929953 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.324939013 CET	443	49734	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.325850010 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.325874090 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.325886965 CET	49733	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.325892925 CET	443	49733	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.339665890 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.339700937 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.339823008 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.350228071 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.350245953 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.350302935 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.350348949 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.350416899 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.352268934 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.352284908 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.369576931 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.369616032 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.369730949 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.376912117 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.376945972 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.389276981 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.389884949 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.389964104 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.390580893 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.390598059 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.390613079 CET	49736	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.390618086 CET	443	49736	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.393162966 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:13.393501043 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.393573999 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.393687010 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.399382114 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.399405956 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.399418116 CET	49737	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.399425030 CET	443	49737	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.455015898 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.455054998 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.455123901 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.480789900 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.480837107 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.480901957 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.481287956 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.481323957 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:13.482763052 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:13.482778072 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.107737064 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.108341932 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.108959913 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.108998060 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.110219002 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.110224962 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.111526012 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.111569881 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.112879038 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.112890959 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.120908022 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.122162104 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.122183084 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.123097897 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.123102903 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.226213932 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.227785110 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.227801085 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.229049921 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.229054928 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.238908052 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.239001989 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.239053011 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.239789009 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.239808083 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.239840984 CET	49741	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.239845991 CET	443	49741	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.246419907 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.246453047 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.246524096 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.246704102 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.246718884 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.250132084 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.250499964 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.250549078 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.250674963 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.250684977 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.250715017 CET	49740	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.250720024 CET	443	49740	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.258044004 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.258241892 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.258263111 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.258310080 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.258322954 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.258363962 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.258992910 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.259005070 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.259017944 CET	49739	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.259022951 CET	443	49739	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.259111881 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.259124041 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.261379957 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.262988091 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.263005972 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.264049053 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.264054060 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.266355038 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.266381025 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.266441107 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.266880989 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.266895056 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.356898069 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.356997013 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.357060909 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.357367992 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.357393980 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.357409000 CET	49742	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.357415915 CET	443	49742	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.360590935 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.360634089 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.360702991 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.360883951 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.360899925 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.402344942 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.402559996 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.402611971 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.402858973 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.402879953 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.402889967 CET	49743	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.402895927 CET	443	49743	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.407058001 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.407080889 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.407135963 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.407500982 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:14.407512903 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:14.422159910 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:14.463340044 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087369919 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087409019 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087415934 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087450027 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087470055 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087476015 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.087483883 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087505102 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087519884 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087528944 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087538004 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.087547064 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087568998 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.087568998 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.087575912 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.087610960 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.088485003 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.088524103 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.088573933 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.117429972 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:15.117486000 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:15.117599964 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:15.217787981 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.218396902 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.218420029 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.218884945 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.218889952 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.223539114 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.223694086 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.223854065 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.224164009 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.224186897 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.224280119 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.224864006 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.224872112 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.225317955 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.225331068 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.226093054 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.226097107 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.226466894 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.226490974 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.227149010 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.227154970 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.227622032 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.227644920 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.228503942 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.228511095 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.349576950 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.349670887 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.349905968 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.350145102 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.350161076 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.350172043 CET	49748	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.350178003 CET	443	49748	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.352961063 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.352993011 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.353147984 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.353533983 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.353545904 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.357935905 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.357963085 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.358174086 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.358223915 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.358326912 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.358398914 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.358418941 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.358428001 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.358438969 CET	49749	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.358443975 CET	443	49749	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.358555079 CET	49750	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.358563900 CET	443	49750	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.361800909 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.362521887 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.362584114 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.364983082 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.365014076 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.365075111 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.365504026 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.365504026 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.365520000 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.365531921 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.366918087 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.366985083 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.367125034 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.367147923 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.367160082 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.367428064 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.367444992 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.367456913 CET	49746	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.367463112 CET	443	49746	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.369307041 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.369318962 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.369385958 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.369643927 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.369654894 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.370366096 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.370400906 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.370470047 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.370634079 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.370649099 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.372744083 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.372773886 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.372881889 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.373058081 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:15.373070955 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:15.997740030 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.997765064 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:15.997811079 CET	49732	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:15.997817039 CET	443	49732	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:16.095024109 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.097448111 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.102968931 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.104607105 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.104680061 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.110385895 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.110394955 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.111382961 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.111396074 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.112436056 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.112440109 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.113034964 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.113056898 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.114852905 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.114857912 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.119151115 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.120043993 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.120065928 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.121325016 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.121331930 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.142916918 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.143501043 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.143521070 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.144357920 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.144371986 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.151124954 CET	49708	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:18:16.151161909 CET	443	49708	142.250.185.132	192.168.2.7
Oct 30, 2024 17:18:16.235430002 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.235685110 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.235749960 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.235934973 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.235971928 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.235999107 CET	49756	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.236015081 CET	443	49756	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.238307953 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.238384962 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.240214109 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.244992018 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.245157003 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.245249033 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.251518965 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.251689911 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.251740932 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.275513887 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.275513887 CET	49753	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.275528908 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.275538921 CET	443	49753	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.276964903 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.277225971 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.277225971 CET	49755	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.277231932 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.277235031 CET	443	49755	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.277295113 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.277497053 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.278374910 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.278393984 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.278423071 CET	49754	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.278429985 CET	443	49754	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.279834032 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.279855967 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.279866934 CET	49757	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.279871941 CET	443	49757	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.283780098 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.283859968 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.284037113 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.286333084 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.286351919 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.286421061 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.286691904 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.286700964 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.286904097 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.286940098 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.288505077 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.288537979 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.288687944 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.290373087 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.290390968 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.291213989 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.291234970 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.291306019 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.291413069 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.291423082 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.292356968 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.292377949 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:16.292623997 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.292845011 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:16.292859077 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.015636921 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.016230106 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.016261101 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.016742945 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.016748905 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.018409014 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.019119978 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.019143105 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.019794941 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.019800901 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.025829077 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.026190042 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.026220083 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.026592970 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.026597977 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.030342102 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.030730009 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.030754089 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.031188965 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.031193972 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.143424034 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.143877029 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.143949986 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.144006014 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.144027948 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.144037962 CET	49760	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.144043922 CET	443	49760	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.148570061 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.148591042 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.148952961 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.149152040 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.149163961 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.154797077 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155554056 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155623913 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155675888 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155735016 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.155791044 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.155791998 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.155803919 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155816078 CET	49759	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.155821085 CET	443	49759	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155913115 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.155921936 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.155934095 CET	49761	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.155939102 CET	443	49761	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.159091949 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.159131050 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.159310102 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.159917116 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.159953117 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.160037994 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.160279036 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.160295010 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.160851002 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.160866976 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.161505938 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.161575079 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.161652088 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.161730051 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.161745071 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.161753893 CET	49762	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.161758900 CET	443	49762	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.164016962 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.164026976 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.164082050 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.164242983 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.164252996 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.225867033 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.226448059 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.226483107 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.227036953 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.227051973 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.356916904 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.356997967 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.357053041 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.357304096 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.357342958 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.357368946 CET	49758	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.357383013 CET	443	49758	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.360634089 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.360688925 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.360855103 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.361089945 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.361108065 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.891238928 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.897634029 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.897665977 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.898601055 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.898614883 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.904149055 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.904949903 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.904980898 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.905416965 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.905534029 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.905541897 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.905858994 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.906218052 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.906229019 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.906596899 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.906601906 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.906966925 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.906996965 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:17.907403946 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:17.907411098 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.028353930 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.028433084 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.028562069 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.036261082 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.037775993 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.038373947 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.038578033 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.038642883 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.039704084 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.095216990 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.108314037 CET	49763	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.108330011 CET	443	49763	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.109625101 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.109658957 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.110804081 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.110811949 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.118402958 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.118431091 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.119292021 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.119297028 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.122970104 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.123011112 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.123266935 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.124941111 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.124967098 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.125137091 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.125267029 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.125277042 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.127295971 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.127326012 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.127466917 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.131005049 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.131019115 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.131098986 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.131110907 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.145812988 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.146198034 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.146265030 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.147972107 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.147984028 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.180417061 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.180428982 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.180550098 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.246071100 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.246145010 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.246287107 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.336829901 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.336846113 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.338118076 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.338140011 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.341188908 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.341228962 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.341278076 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.341531992 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.341543913 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.864736080 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.866565943 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.866583109 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.867082119 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.867086887 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.867363930 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.867767096 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.867775917 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.868175983 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.868181944 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.871716022 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.872137070 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.872159004 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.872550011 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.872555971 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.996624947 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.996788025 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.996844053 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.996967077 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.996983051 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.997005939 CET	49770	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.997010946 CET	443	49770	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.999042034 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.999478102 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.999541998 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.999572992 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.999581099 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:18.999605894 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:18.999609947 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.000304937 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.000333071 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.000435114 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.000691891 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.000699997 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.001874924 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.001904011 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.001950026 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.002144098 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.002157927 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.012801886 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.012860060 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.012909889 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.013120890 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.013132095 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.013144016 CET	49769	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.013149023 CET	443	49769	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.015856028 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.015872002 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.016088009 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.016175032 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.016191006 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.081376076 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.082423925 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.082516909 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.083143950 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.083158970 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.211565971 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.211899042 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.211949110 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.211986065 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.212004900 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.212013960 CET	49772	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.212021112 CET	443	49772	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.214994907 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.215024948 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.215082884 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.215276957 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.215285063 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.418731928 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.419667006 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.419689894 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.420835018 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.420840025 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.554105997 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.554177046 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.554244041 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.554501057 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.554517984 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.554538012 CET	49771	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.554543972 CET	443	49771	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.557455063 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.557487011 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.557662964 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.557861090 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.557872057 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.739890099 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.740504980 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.740520954 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.740972996 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.740979910 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.742558956 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.742923021 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.742947102 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.743407011 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.743412971 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.746104002 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.746401072 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.746432066 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.746797085 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.746802092 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.871330976 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.871506929 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.871754885 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.872025013 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.872046947 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.872061014 CET	49773	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.872066021 CET	443	49773	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.874277115 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.874351025 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.874439955 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.874869108 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.874869108 CET	49775	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.874875069 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.874882936 CET	443	49775	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.875603914 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.875622034 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.875770092 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.876008987 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.876020908 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.876919985 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.876950979 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.877182007 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.877294064 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.877309084 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.877701044 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.878135920 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.878205061 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.878468037 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.878514051 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.878544092 CET	49774	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.878561020 CET	443	49774	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.880470991 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.880496025 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.880811930 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.880876064 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.880882025 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.955391884 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.955976009 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.955988884 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:19.956604958 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:19.956609011 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.084625006 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.084841967 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.084923029 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.084954023 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.084954023 CET	49776	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.084969044 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.084979057 CET	443	49776	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.087657928 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.087732077 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.087821960 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.088010073 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.088047981 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.291903973 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.292450905 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.292469978 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.292932987 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.292937994 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.422517061 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.422637939 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.422687054 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.430063009 CET	49777	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.430082083 CET	443	49777	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.436202049 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.436245918 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.436480999 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.436870098 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.436882973 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.608829021 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.609441042 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 17:18:20.616452932 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.619813919 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.652192116 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.659574986 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.666120052 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.669766903 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.669776917 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.672951937 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.672956944 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.673290014 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.673299074 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.673661947 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.673666954 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.677145004 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.677155018 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.677530050 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.677536964 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.797862053 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.798075914 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.798145056 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.799851894 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.800105095 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.800209045 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.800272942 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.800290108 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.800298929 CET	49779	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.800304890 CET	443	49779	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.803771973 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.803981066 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.804037094 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.811395884 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.811395884 CET	49778	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.811417103 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.811427116 CET	443	49778	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.821815014 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.854924917 CET	49780	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.854940891 CET	443	49780	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.856020927 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.856070995 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.856482029 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.856494904 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.858575106 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.858638048 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.858705044 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.858824015 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.858853102 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.858905077 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.859153986 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.859175920 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.859263897 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.859276056 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.859992027 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.860049009 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.860095024 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.860200882 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.860212088 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.982525110 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.982662916 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.982738018 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.982954025 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.982984066 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.983027935 CET	49781	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.983046055 CET	443	49781	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.987601042 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.987633944 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:20.987721920 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.987900019 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:20.987910986 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.192184925 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.199672937 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.199688911 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.200453043 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.200457096 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.327528954 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.327749014 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.327830076 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.327856064 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.327871084 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.327914953 CET	49782	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.327920914 CET	443	49782	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.331471920 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.331505060 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.331618071 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.331819057 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.331830025 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.604301929 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.605139971 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.605204105 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.606156111 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.606173992 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.614258051 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.614649057 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.614695072 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.615003109 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.615015030 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.623241901 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.623544931 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.623567104 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.623883963 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.623889923 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.721412897 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.722412109 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.722460985 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.723090887 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.723104000 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.735445976 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.735682011 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.735807896 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.735807896 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.735865116 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.735892057 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.738831997 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.738872051 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.739075899 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.739075899 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.739106894 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.745373964 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.746016979 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.746120930 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.746120930 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.746253967 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.746279001 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.748245001 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.748279095 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.748423100 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.748507977 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.748517990 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.760936022 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.760992050 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.761159897 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.761159897 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.761260033 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.761276007 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.763183117 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.763195038 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.763355970 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.763427973 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.763439894 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.857346058 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.857436895 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.857610941 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.857676029 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.857676029 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.857707977 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.857733011 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.860296965 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.860320091 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:21.860486984 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.863722086 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:21.863742113 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.110069036 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.110666990 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.110691071 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.111260891 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.111265898 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.245110035 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.245388985 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.245501041 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.245501041 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.245547056 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.245558977 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.248650074 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.248718977 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.248891115 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.249136925 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.249181986 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.493648052 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.494693995 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.494693995 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.494730949 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.494740963 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.527924061 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.528860092 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.528860092 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.528881073 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.528889894 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.610460997 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.611084938 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.611116886 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.611767054 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.611773014 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.627372980 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.627500057 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.627688885 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.627767086 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.627767086 CET	49790	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.627796888 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.627808094 CET	443	49790	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.631344080 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.631386042 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.631505013 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.631773949 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.631797075 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.661979914 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.662178993 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.662237883 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.663024902 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.663024902 CET	49788	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.663033962 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.663041115 CET	443	49788	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.665848970 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.665883064 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.665951967 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.666178942 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.666192055 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.701571941 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.702963114 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.702963114 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.702984095 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.702996969 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.746741056 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.746946096 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.747678995 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.747705936 CET	49791	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.747720957 CET	443	49791	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.752953053 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.752995968 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.753231049 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.754236937 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.754251957 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.830132008 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.830293894 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.830364943 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.830835104 CET	49789	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.830849886 CET	443	49789	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.837721109 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.837762117 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.837912083 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.838613033 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.838624001 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.988014936 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.992702007 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.992769957 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:22.993437052 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:22.993454933 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.133078098 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.133215904 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.134922028 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.135195971 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.135226011 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.135252953 CET	49792	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.135268927 CET	443	49792	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.138051033 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.138102055 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.138169050 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.138353109 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.138369083 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.365658998 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.377484083 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.377505064 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.379156113 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.379170895 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.389993906 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.390419006 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.390455961 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.390988111 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.390994072 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.506151915 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.506222963 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.506454945 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.506488085 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.506506920 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.506519079 CET	49793	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.506524086 CET	443	49793	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.509454966 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.509493113 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.509567022 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.509812117 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.509824991 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.518992901 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.519017935 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.519073009 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.519109011 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.519176960 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.519526005 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.519526005 CET	49794	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.519563913 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.519593954 CET	443	49794	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.521929026 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.521944046 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.522010088 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.522178888 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.522190094 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.528000116 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.528858900 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.528858900 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.528875113 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.528884888 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.584469080 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.585011959 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.585035086 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.585536003 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.585544109 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.666281939 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.666377068 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.666490078 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.666713953 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.666762114 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.666790009 CET	49795	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.666806936 CET	443	49795	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.669894934 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.669925928 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.669997931 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.670183897 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.670192003 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.720006943 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.720179081 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.720246077 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.720635891 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.720663071 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.720670938 CET	49796	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.720675945 CET	443	49796	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.724277973 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.724323988 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.724458933 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.724700928 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.724718094 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.877178907 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.877831936 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.877872944 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:23.879548073 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:23.879570961 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.022896051 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.022916079 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.022988081 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.023000956 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.023358107 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.023371935 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.023379087 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.023499012 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.023525000 CET	443	49797	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.023566008 CET	49797	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.026374102 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.026406050 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.026475906 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.026679039 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.026689053 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.298597097 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.299278021 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.299293995 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.300079107 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.300082922 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.310273886 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.310868979 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.310914040 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.311733007 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.311739922 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.493649960 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.494218111 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.494234085 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.494891882 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.494896889 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.496004105 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.496031046 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.496073961 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.496089935 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.496102095 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.496151924 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.496332884 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.496345997 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.496352911 CET	49799	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.496359110 CET	443	49799	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.499532938 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.499581099 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.499641895 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.499835968 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.499852896 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.517649889 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.517682076 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.517744064 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.517745018 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.517802954 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.518084049 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.518102884 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.518112898 CET	49798	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.518119097 CET	443	49798	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.521295071 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.521322966 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.521404982 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.521620989 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.521631956 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.609417915 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.609901905 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.609925032 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.610899925 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.610904932 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.674061060 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.674124002 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.674173117 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.674401999 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.674427986 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.674438953 CET	49800	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.674444914 CET	443	49800	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.677772999 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.677876949 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.677943945 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.678088903 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.678108931 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.798145056 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.798315048 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.798382998 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.798553944 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.798576117 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.798588037 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.798594952 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.802511930 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.802536011 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.802632093 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.802891016 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.802903891 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.874649048 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.875221014 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.875237942 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:24.875678062 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:24.875683069 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.035701036 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.035841942 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.035907984 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.036079884 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.036079884 CET	49802	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.036094904 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.036103010 CET	443	49802	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.039040089 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.039079905 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.039257050 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.039474010 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.039491892 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.695687056 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.696243048 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.696260929 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.696805000 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.696810007 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.699065924 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.699637890 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.699662924 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.700068951 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.700076103 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.849667072 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.850198984 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.850254059 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.850666046 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.850682020 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.854887962 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.855251074 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.855271101 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.855629921 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.855635881 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.856404066 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.856678009 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.856712103 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.857012987 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.857024908 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.865200996 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.865900993 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.865963936 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.866050959 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.866064072 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.866077900 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.866082907 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.869086027 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.869122028 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.869184017 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.869332075 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.869347095 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.875046015 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.875299931 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.875355005 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.875411034 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.875428915 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.875449896 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.875456095 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.877947092 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.877974987 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.878230095 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.878464937 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.878475904 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.997133970 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.997279882 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.997345924 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.998336077 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.998394966 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.998460054 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.999562979 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.999603987 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:25.999630928 CET	49807	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:25.999645948 CET	443	49807	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.001627922 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.002526045 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.002669096 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.005114079 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.005132914 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.006797075 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.006809950 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.006828070 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.006833076 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.015193939 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.015239954 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.015296936 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.017329931 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.017357111 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.017477036 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.017493010 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.017503977 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.017582893 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.017589092 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.020371914 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.020414114 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.020508051 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.020730019 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.020745039 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.612210989 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.612816095 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.612835884 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.613338947 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.613344908 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.644802094 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.645497084 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.645515919 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.645984888 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.645991087 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.743489981 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.743566990 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.743621111 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.743916988 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.743943930 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.743964911 CET	49808	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.743973017 CET	443	49808	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.747945070 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.747972012 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.748145103 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.748893023 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.748904943 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.753437042 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.753870010 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.753896952 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.754317999 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.754324913 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.759289980 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.759670973 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.759726048 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.760060072 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.760072947 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.760361910 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.760646105 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.760663986 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.760997057 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.761002064 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.781919956 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.782031059 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.782092094 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.782221079 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.782232046 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.782259941 CET	49809	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.782264948 CET	443	49809	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.785953999 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.786016941 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.786143064 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.786317110 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.786345005 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.888828039 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.888851881 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.888895035 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.888921976 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.888937950 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.889277935 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.889295101 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.889307022 CET	49810	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.889312983 CET	443	49810	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890328884 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890428066 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890446901 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890489101 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.890526056 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890562057 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890618086 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890647888 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.890676022 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.890712976 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.890713930 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.890743017 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.890753984 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.891109943 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.891124964 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.891139984 CET	49811	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.891144991 CET	443	49811	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.894242048 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.894262075 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.894371986 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.894375086 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.894423962 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.894479990 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.894608021 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.894624949 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.894795895 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.894815922 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.895556927 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.895623922 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:26.895739079 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.895884037 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:26.895910025 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.487956047 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.488535881 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.488564014 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.489012003 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.489026070 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.542299032 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.542912960 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.542990923 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.543365002 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.543380976 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.620049953 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.620203018 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.620373964 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.620460987 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.620471001 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.620511055 CET	49813	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.620517015 CET	443	49813	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.623565912 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.623606920 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.623689890 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.623872042 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.623887062 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.628355980 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.629030943 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.629095078 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.629733086 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.629748106 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.632162094 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.632610083 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.632623911 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.633069038 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.633074045 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.648036957 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.648405075 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.648412943 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.648791075 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.648794889 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.675801992 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.676057100 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.676130056 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.676291943 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.676340103 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.676383972 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.676399946 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.679584026 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.679637909 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.679712057 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.679840088 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.679862976 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.757417917 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.757563114 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.757636070 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.757849932 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.757849932 CET	49817	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.757874966 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.757900000 CET	443	49817	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.762573004 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.762610912 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.762691021 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.762888908 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.762904882 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.763724089 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.763797045 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.763912916 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.763968945 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.764142990 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.764142990 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.764157057 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.764164925 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.768404961 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.768438101 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.768613100 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.768964052 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.768978119 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.780682087 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.780745983 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.780900002 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.780900002 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.780966043 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.780977011 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.786068916 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.786082983 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:27.786185026 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.786403894 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:27.786413908 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.361697912 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.362503052 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.362549067 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.363411903 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.363425970 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.475090027 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.475697041 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.475739956 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.476192951 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.476206064 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.489753008 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.490171909 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.490202904 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.490721941 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.490727901 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.491619110 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.491856098 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.491913080 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.491969109 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.491986036 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.492016077 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.492022991 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.494976997 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.495016098 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.495181084 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.495342970 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.495354891 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.515532970 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.515889883 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.515906096 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.516369104 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.516374111 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.552470922 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.552829981 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.552859068 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.553237915 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.553244114 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.617587090 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.617789030 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.617841005 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.617856026 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.617908001 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.617953062 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.617971897 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.617980957 CET	49820	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.617986917 CET	443	49820	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.620762110 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.620800018 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.620806932 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.620892048 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.620976925 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.621006012 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.621023893 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.621031046 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.621169090 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.621193886 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.621212006 CET	49819	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.621220112 CET	443	49819	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.623541117 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.623578072 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.623650074 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.623816013 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.623831034 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.650891066 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.650976896 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.651082993 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.651124001 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.651140928 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.651150942 CET	49821	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.651155949 CET	443	49821	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.653513908 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.653532028 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.653589964 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.653733015 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.653744936 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.688967943 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.689120054 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.689171076 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.689178944 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.689238071 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.692514896 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.692528963 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.692538977 CET	49822	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.692543983 CET	443	49822	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.695652962 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.695700884 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:28.695883036 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.696016073 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:28.696032047 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.284766912 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.285321951 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.285353899 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.285795927 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.285803080 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.363472939 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.363998890 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.364021063 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.364480019 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.364485979 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.374483109 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.374919891 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.374943972 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.375277996 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.375283957 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.421725988 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.421875000 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.421941042 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.423479080 CET	49823	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.423501968 CET	443	49823	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.424159050 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.435621977 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.435652971 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.436635017 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.436641932 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.438755035 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.438831091 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.439024925 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.441175938 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.441206932 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.447154045 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.447835922 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.447853088 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.448370934 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.448375940 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.507519007 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.507781029 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.507838964 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.507905006 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.507905006 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.507925034 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.507936001 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.510458946 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.510485888 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.510591984 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.510718107 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.510727882 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.567677021 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.567779064 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.567846060 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.567856073 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.567892075 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.568347931 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.568347931 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.568411112 CET	49826	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.568422079 CET	443	49826	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.580466986 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.580677986 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.580735922 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.580779076 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.580837965 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.580980062 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.581267118 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.581279039 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.581357956 CET	49827	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.581362963 CET	443	49827	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.583347082 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.583379984 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.629277945 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.629555941 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.629628897 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.646389961 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.646405935 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.646486044 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.753319025 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.753355026 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.753370047 CET	49825	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.753376961 CET	443	49825	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:29.755108118 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:29.755130053 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.063903093 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.063932896 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.064707994 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.064846039 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.064857006 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.220647097 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.221422911 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.221467972 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.222166061 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.222177982 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.283735991 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.284388065 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.284413099 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.285094023 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.285098076 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.334808111 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.335227966 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.335289955 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.335732937 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.335747957 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.355276108 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.355448008 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.355549097 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.355705976 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.355706930 CET	49828	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.355755091 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.355786085 CET	443	49828	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.359067917 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.359107971 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.359263897 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.359411001 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.359419107 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.419163942 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.419606924 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.420047998 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.420828104 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.420836926 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.426137924 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.426182032 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.426323891 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.426745892 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.426762104 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.468238115 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.468374014 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.468430042 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.468497992 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.468565941 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.468590975 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.468607903 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.468616009 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.471848011 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.471883059 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.472054005 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.472223997 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.472238064 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.495202065 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.495685101 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.495702028 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.496155977 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.496160984 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.627648115 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.627943993 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.628017902 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.628232002 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.628232002 CET	49831	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.628243923 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.628252029 CET	443	49831	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.631174088 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.631215096 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.631288052 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.631458044 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.631473064 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.797054052 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.797931910 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.797964096 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.798459053 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.798464060 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.962371111 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.962559938 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.962749004 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.962832928 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.962850094 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.962877989 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.962883949 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.965840101 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.965877056 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:30.965943098 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.966147900 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:30.966161013 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.090887070 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.091434956 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.091469049 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.091933012 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.091948032 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.159785986 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.160789013 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.160820961 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.161259890 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.161266088 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.206135035 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.206598997 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.206624031 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.206988096 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.206994057 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.222587109 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.222652912 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.222712994 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.222923040 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.222939014 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.222950935 CET	49833	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.222956896 CET	443	49833	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.225939035 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.225975990 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.226049900 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.226255894 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.226269960 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.296188116 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.296257973 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.296353102 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.296427965 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.296556950 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.296570063 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.296581030 CET	49834	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.296586037 CET	443	49834	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.299746990 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.299758911 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.299835920 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.299962044 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.299971104 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.335391045 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.335614920 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.335710049 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.335747957 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.335747957 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.335766077 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.335777044 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.338409901 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.338442087 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.338568926 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.338718891 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.338731050 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.367022991 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.367455006 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.367486954 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.367904902 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.367913961 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.499088049 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.499207020 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.499259949 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.499432087 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.499454975 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.499469995 CET	49836	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.499476910 CET	443	49836	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.502901077 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.502940893 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.503102064 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.503669977 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.503683090 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.766868114 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.767478943 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.767513037 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.769808054 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.769814968 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.956007957 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.956167936 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.956433058 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.956480980 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.956500053 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.956511021 CET	49837	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.956516981 CET	443	49837	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.959537029 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.959579945 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.959656000 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.959856987 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.959872007 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.962824106 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.963217974 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.963242054 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:31.963666916 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:31.963671923 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.056294918 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.056837082 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.056855917 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.057507992 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.057511091 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.170124054 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.170649052 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.170670986 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.171274900 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.171278954 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.190510035 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.190711975 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.190774918 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.190830946 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.191092014 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.191096067 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.191128969 CET	49839	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.191133976 CET	443	49839	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.194367886 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.194380999 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.194474936 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.194617987 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.194631100 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.239810944 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.240263939 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.240288019 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.240782976 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.240787983 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.305118084 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.305147886 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.305202007 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.305207014 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.305252075 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.305505991 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.305521965 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.305533886 CET	49838	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.305538893 CET	443	49838	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.309384108 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.309412003 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.309669018 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.309838057 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.309850931 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.369138002 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.369250059 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.369304895 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.369426966 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.369448900 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.369462013 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.369467020 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.372272968 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.372307062 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.372524023 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.372684002 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.372697115 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.468812943 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.468847990 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.468894958 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.468950987 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.469162941 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.469182014 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.469192982 CET	49840	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.469199896 CET	443	49840	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.472774029 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.472801924 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.472865105 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.473010063 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.473022938 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.687025070 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.687588930 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.687614918 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.688213110 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.688218117 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.817060947 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.817084074 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.817121029 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.817183971 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.817316055 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.817934990 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.817945004 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.817970991 CET	49842	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.817976952 CET	443	49842	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.821640015 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.821662903 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.821880102 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.825706005 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.825731039 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.934509993 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.935048103 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.935079098 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:32.937551022 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:32.937566996 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.044409990 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.045603037 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.045603037 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.045625925 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.045634985 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.080199957 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.080362082 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.080568075 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.080800056 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.080800056 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.080815077 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.080823898 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.084120035 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.084148884 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.084342957 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.084472895 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.084482908 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.105914116 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.106391907 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.106419086 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.106846094 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.106849909 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.178327084 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.178509951 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.178549051 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.178653002 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.178733110 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.178733110 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.178744078 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.178747892 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.185698032 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.185723066 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.190020084 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.191764116 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.191776991 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.217191935 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.217719078 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.217749119 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.218453884 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.218460083 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.236162901 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.236388922 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.236491919 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.236491919 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.236654997 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.236670971 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.240123987 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.240158081 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.240394115 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.240394115 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.240422964 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.348897934 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.348922968 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.348967075 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.348992109 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.349271059 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.349503994 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.349503994 CET	49846	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.349518061 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.349528074 CET	443	49846	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.352947950 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.352971077 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.353138924 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.353415012 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.353435040 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.558841944 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.559864044 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.559864998 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.559899092 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.559914112 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.690263033 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.690466881 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.690572023 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.691024065 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.691039085 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.691076040 CET	49847	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.691081047 CET	443	49847	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.694114923 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.694145918 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.694310904 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.694454908 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.694463015 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.807105064 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.807573080 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.807591915 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.808046103 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.808052063 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.922564030 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.923115015 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.923125029 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.924458981 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.924463034 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.956733942 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.956830978 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.956908941 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.957154036 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.957154036 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.957174063 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.957182884 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.959996939 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.960064888 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.960222006 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.960398912 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.960427046 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.968218088 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.968599081 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.968616962 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:33.969038010 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:33.969043016 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.052684069 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.052798033 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.052871943 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.053029060 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.053040981 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.053049088 CET	49849	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.053052902 CET	443	49849	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.055841923 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.055874109 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.056212902 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.056263924 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.056272030 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.097146034 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.097313881 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.097358942 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.097369909 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.097426891 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.097738981 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.097755909 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.097769976 CET	49850	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.097774982 CET	443	49850	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.100334883 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.100390911 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.100516081 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.100694895 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.100724936 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.112210989 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.112620115 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.112634897 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.113070011 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.113075972 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.287494898 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.287570000 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.287651062 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.287925005 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.287941933 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.287950039 CET	49851	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.287955999 CET	443	49851	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.291217089 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.291270018 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.291574001 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.291771889 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.291801929 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.454231977 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.454864025 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.454878092 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.455497980 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.455502987 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.588392973 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.588459015 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.588550091 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.588653088 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.588787079 CET	49852	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.588802099 CET	443	49852	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.592072010 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.592097044 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.592176914 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.592325926 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.592335939 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.680603981 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.681197882 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.681261063 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.681664944 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.681679010 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.791943073 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.792995930 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.792996883 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.793023109 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.793031931 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.813894033 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.813987970 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.814260006 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.814322948 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.814322948 CET	49853	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.814359903 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.814390898 CET	443	49853	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.817315102 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.817361116 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.817481041 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.817636967 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.817667007 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.852173090 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.852724075 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.852758884 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.853235006 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.853245974 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.924855947 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.925075054 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.925324917 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.925405025 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.925420046 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.925451994 CET	49854	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.925458908 CET	443	49854	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.928509951 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.928539991 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.929171085 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.929171085 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.929194927 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.985101938 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.985183954 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.985711098 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.985923052 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.985924006 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.985954046 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.985977888 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.990164995 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.990206003 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:34.990379095 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.990699053 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:34.990735054 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.025419950 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.026391029 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.026391029 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.026424885 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.026448965 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.451741934 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.451766014 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.451814890 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.451848030 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.451941967 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.452172995 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.452172995 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.452228069 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.452250957 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.455185890 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.455230951 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.455382109 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.455674887 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.455688953 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.582144022 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.583300114 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.583300114 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.583323956 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.583331108 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.590637922 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.591551065 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.591551065 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.591602087 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.591614962 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.670517921 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.671544075 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.671544075 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.671566010 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.671575069 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.714267969 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.714401007 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.714536905 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.714729071 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.714745045 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.714809895 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.714818954 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.717981100 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.718003035 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.718276024 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.718276024 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.718298912 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.723335028 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.723359108 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.723407030 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.723453045 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.723510981 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.723741055 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.723741055 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.723766088 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.723788023 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.726677895 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.726695061 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.726887941 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.726887941 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.726917982 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.732738018 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.733377934 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.733395100 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.733839035 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.733843088 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.800024033 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.800090075 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.800193071 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.800626993 CET	49859	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.800647974 CET	443	49859	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.804498911 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.804537058 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.804624081 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.804872990 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.804883957 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.864866018 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.864980936 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.865041971 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.865197897 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.865214109 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.865219116 CET	49860	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.865223885 CET	443	49860	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.868343115 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.868371010 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:35.868563890 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.868774891 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:35.868789911 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.207899094 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.208627939 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.208664894 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.209538937 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.209551096 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.339905977 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.340293884 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.340373039 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.340425968 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.340425968 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.340451956 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.340464115 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.344218969 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.344257116 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.344389915 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.344584942 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.344599009 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.452704906 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.453217030 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.453239918 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.453855038 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.453862906 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.459398985 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.459799051 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.459824085 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.460369110 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.460376024 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.532418013 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.535181999 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.535208941 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.536113977 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.536118984 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.583352089 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.583504915 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.583609104 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.583925009 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.583944082 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.583955050 CET	49862	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.583961964 CET	443	49862	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.586894035 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.586934090 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.587146997 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.587188005 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.587193966 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.589709044 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.589843035 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.589898109 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.592713118 CET	49863	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.592730999 CET	443	49863	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.611422062 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.615469933 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.615505934 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.617712975 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.617719889 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.623152018 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.623187065 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.623383045 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.624205112 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.624219894 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.666450024 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.666546106 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.666631937 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.667462111 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.667479038 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.667489052 CET	49864	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.667495012 CET	443	49864	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.675215006 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.675276041 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.675412893 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.677810907 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.677841902 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.748306990 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.748625994 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.748692036 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.749130011 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.749154091 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.749166012 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.749171019 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.757191896 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.757230997 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:36.757508993 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.757936954 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:36.757951021 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.215084076 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.215605021 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.215631008 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.216101885 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.216106892 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.356226921 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.356261015 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.356302977 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.356317997 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.356362104 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.356621981 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.356643915 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.356652975 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.356658936 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.359805107 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.359913111 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.360023975 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.360227108 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.360259056 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.424839973 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.425539970 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.425571918 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.426296949 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.426302910 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.550692081 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.551290989 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.551321030 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.551793098 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.551798105 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.552222967 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.552659988 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.552710056 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.553008080 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.553020954 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.583033085 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.583105087 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.583167076 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.583372116 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.583391905 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.583401918 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.583406925 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.586467028 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.586487055 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.586560965 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.586688995 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.586698055 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.704559088 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.704629898 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.704691887 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.705168962 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.705199003 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.705224037 CET	49869	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.705235004 CET	443	49869	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.707185984 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.707251072 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.707386971 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.707612991 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.707624912 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.707634926 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.707639933 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.708848000 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.708865881 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.709013939 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.709191084 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.709206104 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.709677935 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.709691048 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.709749937 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.709909916 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.709920883 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.788237095 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.789288998 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.789288998 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.789319992 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.789355040 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.991147995 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.991219044 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.991307020 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.991338968 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.991384029 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.991693974 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.991693974 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.991847038 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.991862059 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.994947910 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.994988918 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:37.995609045 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.995657921 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:37.995663881 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.189922094 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.191373110 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.191445112 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.192043066 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.192059994 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.355623007 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.355649948 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.355709076 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.355772018 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.356035948 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.356095076 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.356129885 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.356131077 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.356153011 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.356170893 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.361632109 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.361687899 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.362384081 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.363821030 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.363851070 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.390105009 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.390543938 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.390568972 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.393639088 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.393645048 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.507694960 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.528641939 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.550455093 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.552071095 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.552109003 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.552156925 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.555731058 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.562016964 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.562016964 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.562027931 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.562042952 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.562601089 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.562630892 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.563333035 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.563348055 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.563349962 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.563354015 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.563462019 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.563468933 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.568073988 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.568120003 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.571892977 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.571892977 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.571929932 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.704389095 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.704423904 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.704477072 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.704566956 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.704631090 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.704687119 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.708003998 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.774745941 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.774764061 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.778222084 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.778222084 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.778243065 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.778253078 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.781574011 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.781598091 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.781645060 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.781671047 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.781728983 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.781758070 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.781861067 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.781879902 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.782011986 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.782044888 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.841897964 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.842325926 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.842346907 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:38.842849970 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:38.842854023 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.023629904 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.023825884 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.023900032 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.027539968 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.027560949 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.027570963 CET	49875	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.027575970 CET	443	49875	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.030630112 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.030687094 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.030744076 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.030931950 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.030946016 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.163808107 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.164535999 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.164561987 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.165019989 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.165024996 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.316535950 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.316564083 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.316620111 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.316638947 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.316706896 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.317503929 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.317503929 CET	49876	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.317549944 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.317576885 CET	443	49876	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.320899963 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.320976019 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.321068048 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.321266890 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.321295023 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.399868965 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.400434017 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.400468111 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.400969982 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.400976896 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.541069984 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.541212082 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.541688919 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.541703939 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.541742086 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.541748047 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.542176962 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.542191029 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.542423964 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.542433023 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.547039986 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.547060966 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.547099113 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.547118902 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.547144890 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.547357082 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.547379017 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.547393084 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.547399998 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.550709009 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.550745010 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.550810099 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.550946951 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.550960064 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.671426058 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.671498060 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.671560049 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.671797991 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.671808004 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.671823978 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.671830893 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.675326109 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.675338030 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.675398111 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.675542116 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.675550938 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.675703049 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.675793886 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.675828934 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.675836086 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.675878048 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.675997972 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.676012993 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.676048994 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.676057100 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.678174973 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.678199053 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.678263903 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.678400040 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.678407907 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.810066938 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.811095953 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.811095953 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.811119080 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.811131001 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.942161083 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.942342997 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.944586039 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.944772959 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.944787979 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.944840908 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.944848061 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.948213100 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.948251963 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:39.948398113 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.948564053 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:39.948575020 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.063159943 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.082906008 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.082978010 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.083724976 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.083739042 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.211321115 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.211481094 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.211649895 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.212320089 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.212349892 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.212404966 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.212419987 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.217535973 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.217571974 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.217809916 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.218297005 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.218310118 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.319843054 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.321206093 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.321234941 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.322323084 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.322329044 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.423907995 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.424549103 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.424571037 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.425121069 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.425127029 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.429394960 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.429856062 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.429886103 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.430429935 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.430439949 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.455979109 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.456028938 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.456085920 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.456120014 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.456262112 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.456459045 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.456459045 CET	49882	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.456473112 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.456480980 CET	443	49882	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.459908009 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.459940910 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.460181952 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.460202932 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.460207939 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.554604053 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.554630995 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.554673910 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.554709911 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.554836988 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.554987907 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.555003881 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.555043936 CET	49884	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.555049896 CET	443	49884	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.558399916 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.558435917 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.558500051 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.558800936 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.558810949 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.563780069 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.563921928 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.564063072 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.564169884 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.564169884 CET	49883	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.564232111 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.564264059 CET	443	49883	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.572025061 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.572057962 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.572135925 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.572478056 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.572491884 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.706233025 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.707492113 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.707493067 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.707506895 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.707520008 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.844180107 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.844291925 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.844341040 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.844685078 CET	49885	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.844697952 CET	443	49885	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.853660107 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.853701115 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.853755951 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.854095936 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.854108095 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.974994898 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.975532055 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.975555897 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:40.976253986 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:40.976257086 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.109026909 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.109052896 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.109107018 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.109119892 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.109173059 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.113054037 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.113084078 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.113099098 CET	49886	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.113104105 CET	443	49886	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.116678953 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.116724968 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.116796970 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.116961002 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.116976976 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.236121893 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.237392902 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.237410069 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.238111019 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.238115072 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.293318987 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.293857098 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.293886900 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.294625044 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.294631004 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.314735889 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.316267014 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.316301107 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.317018032 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.317033052 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.375194073 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.375550032 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.375607014 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.375643969 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.375664949 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.375682116 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.375688076 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.384715080 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.384826899 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.384916067 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.385107994 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.385138988 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.423397064 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.423466921 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.423512936 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.423719883 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.423732996 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.423744917 CET	49888	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.423751116 CET	443	49888	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.427149057 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.427194118 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.427330017 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.427414894 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.427429914 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.447077036 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.447170019 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.447233915 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.447402954 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.447411060 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.447427034 CET	49889	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.447433949 CET	443	49889	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.464062929 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.464121103 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.464184999 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.465563059 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.465578079 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.591217995 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.591712952 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.591743946 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.592233896 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.592237949 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.721745014 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.721869946 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.721924067 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.723536015 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.723551035 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.723560095 CET	49890	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.723566055 CET	443	49890	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.727622032 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.727667093 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.727749109 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.727962971 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.727982998 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.871501923 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.872685909 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.872685909 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:41.872714043 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:41.872724056 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.000718117 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.000782013 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.001075983 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.001075983 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.001120090 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.001137018 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.004897118 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.004931927 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.005116940 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.005270004 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.005278111 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.134052992 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.135385990 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.135386944 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.135471106 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.135503054 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.170141935 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.170748949 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.170780897 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.171407938 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.171413898 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.197870016 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.199124098 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.199124098 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.199167967 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.199177980 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.265536070 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.265639067 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.265691042 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.265908003 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.265908003 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.266011000 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.266030073 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.270097017 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.270129919 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.270337105 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.270337105 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.270366907 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.315423965 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.315494061 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.315777063 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.315777063 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.316040993 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.316059113 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.319236994 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.319295883 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.319618940 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.319618940 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.319653988 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.328286886 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.328474045 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.328511953 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.328669071 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.328669071 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.328768969 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.328809023 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.331523895 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.331612110 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.332998037 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.333126068 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.333148956 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.475517988 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.476145983 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.476169109 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.476672888 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.476677895 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.610054016 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.610315084 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.610414982 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.610414982 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.611510038 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.611526966 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.614407063 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.614444017 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.614684105 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.614684105 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.614708900 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.736183882 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.738006115 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.738022089 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.738543987 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.738549948 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.867568970 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.867603064 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.867650032 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.867666006 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.867708921 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.867944002 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.867955923 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.867981911 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.867986917 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.871067047 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.871100903 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.871187925 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.871361971 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.871373892 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.993447065 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.994020939 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.994092941 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:42.994491100 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:42.994507074 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.066577911 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.067085981 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.067117929 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.067559958 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.067565918 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.103178978 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.103701115 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.103732109 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.104204893 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.104217052 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.122914076 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.123016119 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.123270988 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.123343945 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.123343945 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.123380899 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.123408079 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.126518011 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.126557112 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.126616955 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.126756907 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.126766920 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.200948000 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.200977087 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.201020956 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.201025963 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.201067924 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.201324940 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.201344967 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.201355934 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.201361895 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.204421997 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.204457045 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.204536915 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.204859972 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.204870939 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.235963106 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.236100912 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.236166000 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.236620903 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.236620903 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.236660004 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.236687899 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.240751028 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.240794897 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.240879059 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.241053104 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.241084099 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.352792025 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.353358984 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.353389978 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.354018927 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.354027033 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.482498884 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.482557058 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.482630014 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.482645035 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.482745886 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.482861996 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.482942104 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.482954979 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.482965946 CET	49900	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.482970953 CET	443	49900	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.485912085 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.485944033 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.486095905 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.486381054 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.486396074 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.612123013 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.613559008 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.613596916 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.614428043 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.614442110 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.744595051 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.744623899 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.744685888 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.744705915 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.744791031 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.744843960 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.744920015 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.744934082 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.744960070 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.744966030 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.750473976 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.750566959 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.750696898 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.750845909 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.750866890 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.856060982 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.856622934 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.856658936 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.857090950 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.857098103 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.938688040 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.939325094 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.939338923 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.939924955 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.939929962 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.981121063 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.981643915 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.981718063 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.982091904 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.982106924 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.986419916 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.986452103 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.986510038 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.986524105 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.986568928 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.986747026 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.986747026 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.986767054 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.986776114 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.992191076 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.992230892 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:43.992333889 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.992511034 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:43.992521048 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.069683075 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.070027113 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.070086956 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.070122004 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.070139885 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.070177078 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.070183039 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.073251963 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.073276043 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.073348999 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.073534012 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.073545933 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.114126921 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.114182949 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.114239931 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.114240885 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.114335060 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.114483118 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.114520073 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.114618063 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.114634037 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.117640972 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.117680073 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.117783070 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.117995024 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.118016005 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.235296965 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.235919952 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.235960960 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.236752033 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.236757994 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.370811939 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.370925903 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.371056080 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.371365070 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.371386051 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.371401072 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.371406078 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.374834061 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.374867916 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.374941111 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.375170946 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.375180960 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.470640898 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.471246004 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.471276045 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.473927975 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.473937035 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.606061935 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.606465101 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.606523037 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.606549978 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.606595039 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.606671095 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.606671095 CET	49906	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.606688023 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.606692076 CET	443	49906	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.609882116 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.609922886 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.610165119 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.610165119 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.610198021 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.725290060 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.725861073 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.725895882 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.726346970 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.726353884 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.809133053 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.809907913 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.809926987 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.810153961 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.810165882 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.860866070 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.860913992 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.861046076 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.861377954 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.862330914 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.862330914 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.862356901 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.862379074 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.862596989 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.862620115 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.862648010 CET	49907	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.862653971 CET	443	49907	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.865752935 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.865788937 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.865942955 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.866050005 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.866056919 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.939647913 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.939718962 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.939790964 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.939891100 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.940073967 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.940073967 CET	49908	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.940093040 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.940102100 CET	443	49908	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.943224907 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.943262100 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:44.943399906 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.945646048 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:44.945660114 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.001825094 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.001902103 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.004703045 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.004703045 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.004961967 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.004987001 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.007623911 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.007657051 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.013808012 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.014023066 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.014034986 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.121499062 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.122143030 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.122174025 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.122936010 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.122941971 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.254385948 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.254522085 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.254666090 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.256200075 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.256200075 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.256664038 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.256685019 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.301650047 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.301717043 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.307651997 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.354891062 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.412635088 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.422859907 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.422862053 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.422877073 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.422888041 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.423415899 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.423420906 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.582159996 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.582287073 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.582535028 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.582535028 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.582793951 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.582818985 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.585586071 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.585635900 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.585817099 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.585939884 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.585954905 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.604805946 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.605822086 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.605822086 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.605855942 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.605874062 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.731563091 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.732187033 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.732218981 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.732737064 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.732743979 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.735280037 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.735353947 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.735614061 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.735614061 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.735650063 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.735666037 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.739485025 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.739531040 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.739705086 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.739888906 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.739898920 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.744514942 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.745012999 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.745027065 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.745397091 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.745402098 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.868901968 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.868942022 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.869004965 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.869050026 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.869050026 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.869334936 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.869334936 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.869354963 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.869373083 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.872590065 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.872637987 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.872705936 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.872898102 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.872911930 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.876439095 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.876496077 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.876547098 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.876665115 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.876682043 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.876693010 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.876698017 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.879302979 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.879354000 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:45.879420996 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.879559040 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:45.879570961 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.168916941 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.169518948 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.169542074 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.172185898 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.172195911 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.309632063 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.309706926 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.309793949 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.310131073 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.310131073 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.310158968 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.310168982 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.313659906 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.313709021 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.313783884 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.313983917 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.314001083 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.343836069 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.344353914 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.344389915 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.344855070 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.344860077 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.472719908 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.473257065 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.473284006 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.473890066 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.473895073 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.478178978 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.478580952 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.478627920 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.478647947 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.478663921 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.478714943 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.478751898 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.478773117 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.478775978 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.478782892 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.481697083 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.481739998 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.481976032 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.482131958 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.482141018 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.604779005 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.605375051 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.605412006 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.606023073 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.606067896 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.606082916 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.606084108 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.606148958 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.606324911 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.606347084 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.606363058 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.606369019 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.609349012 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.609397888 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.609461069 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.609628916 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.609646082 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.621263027 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.621684074 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.621716976 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.622137070 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.622142076 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.735579967 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.735687971 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.735738039 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.735748053 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.735797882 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.736040115 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.736066103 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.736080885 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.736088037 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.741058111 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.741106987 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.741173029 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.741380930 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.741391897 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.753690004 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.754964113 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.755032063 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.755085945 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.755106926 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.755112886 CET	49919	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.755119085 CET	443	49919	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.757625103 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.757656097 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:46.757724047 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.757891893 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:46.757903099 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.034111977 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.037204981 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.037204981 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.037252903 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.037264109 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.162961006 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.163120985 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.163343906 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.163784027 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.163784981 CET	49920	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.163810968 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.163825989 CET	443	49920	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.169612885 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.169650078 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.173835993 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.173835993 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.173871040 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.255889893 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.262013912 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.262048006 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.262554884 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.262559891 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.371197939 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.372262001 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.372262001 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.372303963 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.372325897 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.391098022 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.391134024 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.391187906 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.391222954 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.391282082 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.391437054 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.391437054 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.391453981 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.391465902 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.395154953 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.395189047 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.395673037 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.395673037 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.395701885 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.503817081 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.505469084 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.505546093 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.507744074 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.508549929 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.508572102 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.508708000 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.508708000 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.508733988 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.508739948 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.509046078 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.509053946 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.512453079 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.512489080 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.512641907 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.513057947 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.513068914 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.531616926 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.532519102 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.532551050 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.537069082 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.537086010 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.969703913 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.969742060 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.969794989 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.969836950 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.969907045 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.970463991 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.970530987 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.970586061 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.979602098 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.979624033 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.981688023 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.981717110 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.981730938 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.981738091 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.998694897 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.998738050 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.998806000 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.999269962 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.999284029 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.999655962 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.999706984 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:47.999870062 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.999917984 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:47.999927044 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.104716063 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.105339050 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.105374098 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.105953932 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.105959892 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.128381014 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.129061937 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.129085064 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.129703045 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.129708052 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.241971016 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.242094994 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.242146969 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.242543936 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.242543936 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.242562056 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.242571115 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.247164965 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.247211933 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.247273922 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.247620106 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.247633934 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.251604080 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.252954006 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.252974987 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.253743887 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.253751993 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.260945082 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.261151075 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.261183977 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.261199951 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.261220932 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.261265993 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.261392117 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.261409044 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.261418104 CET	49926	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.261423111 CET	443	49926	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.266575098 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.266628027 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.266716957 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.267257929 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.267276049 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.381369114 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.381535053 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.381619930 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.381942987 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.381942987 CET	49927	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.381964922 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.381970882 CET	443	49927	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.386722088 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.386780977 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.386854887 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.387299061 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.387325048 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.741326094 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.741847038 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.741878986 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.742418051 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.742424011 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.746020079 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.746468067 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.746506929 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.746908903 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.746916056 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.873845100 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.873944998 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.874013901 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.874295950 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.874313116 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.874324083 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.874330044 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.877871990 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.877969027 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.878160954 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.878343105 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.878380060 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.879115105 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.879196882 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.879261017 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.879481077 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.879503965 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.879518986 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.879525900 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.881984949 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.882033110 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.882116079 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.882255077 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.882270098 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.980535984 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.983052015 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:18:48.983079910 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:18:48.983982086 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.984018087 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.984478951 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.984486103 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.992189884 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.992718935 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.992757082 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:48.993194103 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:48.993202925 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.118581057 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.118685007 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.118760109 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.118781090 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.118861914 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.119127989 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.119127989 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.119148970 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.119159937 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.121932030 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.122092962 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.122206926 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.122452021 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.122473955 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.122487068 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.122493029 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.122643948 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.122757912 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.122848988 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.122997999 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.123030901 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.125269890 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.125297070 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.125494957 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.125641108 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.125648975 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.131128073 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.131613970 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.131642103 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.132100105 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.132105112 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.264707088 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.264756918 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.264806986 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.264816999 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.264857054 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.265106916 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.265125990 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.265136957 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.265142918 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.270091057 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.270128965 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.270373106 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.270765066 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.270780087 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.600543022 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.600985050 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.601023912 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.601454020 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.601459980 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.630742073 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.631236076 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.631263018 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.631722927 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.631731987 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.730895996 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.731021881 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.731091976 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.731369972 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.731394053 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.731408119 CET	49933	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.731414080 CET	443	49933	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.734494925 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.734538078 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.734599113 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.734787941 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.734798908 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.765984058 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.766047955 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.766108036 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.766113043 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.766154051 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.766392946 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.766412973 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.766423941 CET	49934	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.766431093 CET	443	49934	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.770663023 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.770705938 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.770793915 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.770997047 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.771014929 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.880779982 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.881401062 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.881432056 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:49.881957054 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:49.881967068 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.016519070 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.016598940 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.016676903 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.017021894 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.017040014 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.017059088 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.017064095 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.017482042 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.017935991 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.017962933 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.019226074 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.019232035 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.021856070 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.021878004 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.021939039 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.022090912 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.022099018 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.151309967 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.151403904 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.151467085 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.151788950 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.151808023 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.151819944 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.151825905 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.155838013 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.155874014 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.155968904 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.156135082 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.156147003 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.458425045 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.478034019 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.478069067 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.480629921 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.480638027 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.509164095 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.509939909 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.509968996 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.510930061 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.510938883 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.606374979 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.606426001 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.606492043 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.606554031 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.607846975 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.607846975 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.607872963 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.607884884 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.620287895 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.620345116 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.620682001 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.620872974 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.620893002 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.644407988 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.644614935 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.644799948 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.645962000 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.645981073 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.653939962 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.653989077 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.654134989 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.654416084 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.654428959 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.782387018 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.782980919 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.783009052 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.784465075 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.784470081 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.890800953 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.891467094 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.891501904 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.892026901 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.892033100 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.918354034 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.918420076 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.918503046 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.918719053 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.918719053 CET	49940	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.918737888 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.918746948 CET	443	49940	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.922091961 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.922144890 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:50.922224998 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.922415018 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:50.922431946 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.022805929 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.022886992 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.023005962 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.023248911 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.023271084 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.023300886 CET	49941	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.023307085 CET	443	49941	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.027915001 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.027956963 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.028039932 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.028234959 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.028253078 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.088982105 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.089780092 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.089813948 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.090399981 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.090408087 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.222697020 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.222800970 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.222914934 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.223139048 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.223161936 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.223172903 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.223179102 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.227077007 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.227123022 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.227197886 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.227391958 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.227401972 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.363527060 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.364228010 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.364279985 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.364851952 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.364864111 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.395739079 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.396383047 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.396406889 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.397227049 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.397237062 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.669287920 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.669358015 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.669444084 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.669931889 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.669975996 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.670011044 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.670042992 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.673103094 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.673141003 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.673331022 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.673523903 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.673537970 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.791125059 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.791217089 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.791434050 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.791518927 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.791538000 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.791553974 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.791559935 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.795061111 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.795101881 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.795181990 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.795392990 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.795403957 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.797959089 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.798403025 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.798437119 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.798882008 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.798887014 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.807753086 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.808243990 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.808284044 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.808715105 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.808722973 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.927433014 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.927501917 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.927794933 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.927994967 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.928016901 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.928040028 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.928045988 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.931245089 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.931282997 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.931370020 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.931724072 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.931735039 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.950179100 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.950258970 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.950344086 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.950695992 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.950716972 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.950731993 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.950738907 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.953785896 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.953819036 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.953984022 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.954346895 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.954355955 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.983752012 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.984378099 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.984399080 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:51.984826088 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:51.984832048 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.114686012 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.114768982 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.114886045 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.114959002 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.130691051 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.130727053 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.134247065 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.134284019 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.134442091 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.134804964 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.134819984 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.444175005 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.452007055 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.452033997 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.452759027 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.452764988 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.533478975 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.535186052 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.535207987 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.536045074 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.536050081 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.584536076 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.584688902 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.584754944 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.584913969 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.584933043 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.585045099 CET	49947	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.585052013 CET	443	49947	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.588044882 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.588088036 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.588159084 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.588366985 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.588377953 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.660306931 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.660870075 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.660893917 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.661391020 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.661395073 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.666380882 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.666423082 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.666481018 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.666552067 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.666552067 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.666665077 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.666665077 CET	49948	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.666686058 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.666696072 CET	443	49948	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.669640064 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.669682980 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.669753075 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.669910908 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.669924974 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.693438053 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:52.693547010 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:52.693639994 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:52.694109917 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:52.694154978 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:52.712822914 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.713452101 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.713474035 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.714004993 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.714010000 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.788153887 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.788407087 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.788886070 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.794897079 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.794928074 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.794940948 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.794949055 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.798778057 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.798827887 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.799352884 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.799352884 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.799387932 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.853382111 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.853423119 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.853471041 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.853646994 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.853884935 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.853884935 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.853904009 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.853914022 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.857203007 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.857240915 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.857403040 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.857544899 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.857563019 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.874607086 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.875694036 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.875694036 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:52.875720024 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:52.875735998 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.010464907 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.010617971 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.010715961 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.010952950 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.010982990 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.011028051 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.011037111 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.014025927 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.014067888 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.014559031 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.014559031 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.014595985 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.349399090 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.350528002 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.350528002 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.350558043 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.350578070 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.434734106 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.435950041 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.435950041 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.435985088 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.435996056 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.484420061 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.484529018 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.484637022 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.484904051 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.484925985 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.484958887 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.484966040 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.488348007 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.488393068 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.488667965 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.488667965 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.488706112 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.527489901 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.528202057 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.528228998 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.528681993 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.528687954 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.567583084 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.567684889 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.568099022 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.568099022 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.568279982 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.568303108 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.571336031 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.571378946 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.571613073 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.571662903 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.571669102 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.607294083 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.607922077 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.607956886 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.608443022 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.608455896 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.657809019 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.657850027 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.657903910 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.658090115 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.658365011 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.658385038 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.658435106 CET	49955	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.658441067 CET	443	49955	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.662307024 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.662345886 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.662465096 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.662683010 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.662693024 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.744343042 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.744405985 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.744570971 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.744792938 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.744792938 CET	49956	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.744812012 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.744822025 CET	443	49956	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.747977972 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.748025894 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.749383926 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.749536037 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.749553919 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.750394106 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.751307011 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.751307011 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.751354933 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.751359940 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.797383070 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:53.797595978 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:53.800962925 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:53.800972939 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:53.801285982 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:53.834958076 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:53.879333973 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:53.889892101 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.890022039 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.890296936 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.890587091 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.890611887 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.890626907 CET	49957	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.890634060 CET	443	49957	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.900032997 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.900091887 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:53.900222063 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.900537014 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:53.900552988 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.208599091 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.208636045 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.208662033 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.208667994 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.208712101 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.208740950 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.208758116 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.208795071 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.249715090 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.250505924 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.250579119 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.251172066 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.251187086 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.292444944 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.293359041 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.293385983 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.294342995 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.294347048 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.326191902 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.326235056 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.326289892 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.326317072 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.326333046 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.326581001 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.326592922 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.326668978 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.326786995 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.326827049 CET	443	49954	4.175.87.197	192.168.2.7
Oct 30, 2024 17:18:54.326879025 CET	49954	443	192.168.2.7	4.175.87.197
Oct 30, 2024 17:18:54.384691954 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.384720087 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.384788036 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.384816885 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.385019064 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.385068893 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.414228916 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.425395966 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.425488949 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.425638914 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.456543922 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.534071922 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.579484940 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.648153067 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.674169064 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.674210072 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.681849003 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.681859016 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.682250977 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.682275057 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.682658911 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.682663918 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.684351921 CET	49958	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.684381008 CET	443	49958	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.685662985 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.685672998 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.686383009 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.686387062 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.686428070 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.686460018 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.686481953 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.686494112 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.690315962 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.690341949 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.690443993 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.691821098 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.691832066 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.692091942 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.692121983 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.692472935 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.692472935 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.692500114 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.810165882 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.810203075 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.810322046 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.810412884 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.810770988 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.815263987 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.815309048 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.815395117 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.815407991 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.815438032 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.815956116 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.815979004 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.816010952 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.816032887 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.816041946 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.817641973 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.833901882 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.833923101 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.833935022 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.833940983 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.836219072 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.836225986 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.836236000 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.836239100 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.837829113 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.837862968 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.837877989 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.837884903 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.844135046 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.844181061 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.844239950 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.844778061 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.844796896 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.845212936 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.845244884 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.845330000 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.845513105 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.845516920 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.845525026 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.845527887 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:54.845585108 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.845664978 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:54.845674992 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:55.424335957 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:55.425460100 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:55.425482988 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:55.426096916 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:55.426103115 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:55.428584099 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:55.428947926 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:55.428966045 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:55.429383039 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:55.429388046 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.504981041 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.504991055 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.505007982 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.505064964 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.505110979 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.505124092 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.505136967 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.505209923 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.505237103 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.505527020 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.505547047 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.505584955 CET	49964	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.505593061 CET	443	49964	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.506901026 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.506917953 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.506952047 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.506958961 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.508996964 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.509566069 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.509588003 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.509993076 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.509999037 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.520524979 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.520545006 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.520632029 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.520679951 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.520715952 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.520814896 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.520962954 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.520975113 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.521200895 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.521219969 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.637693882 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.638345003 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.638366938 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.638874054 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.638880014 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.643176079 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.643235922 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.643676996 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.644009113 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.644009113 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.644028902 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.644038916 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.645126104 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.645786047 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.645802975 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.646362066 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.646368980 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.648340940 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.648382902 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.648483038 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.648657084 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.648679018 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.782490015 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.782565117 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.782708883 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.782960892 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.782974005 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.783092976 CET	49965	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.783098936 CET	443	49965	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.786782980 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.786854982 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.787122965 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.787122965 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.787162066 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.883019924 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.883116961 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.883207083 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.886573076 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.886610031 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.890036106 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.890072107 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:56.890167952 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.890429974 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:56.890440941 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.253663063 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.260622978 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.260677099 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.261439085 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.261461973 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.267923117 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.269053936 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.269077063 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.269797087 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.269803047 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.388581038 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.388632059 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.388715982 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.388758898 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.389105082 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.389230013 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.389379025 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.389405966 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.396502018 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.396564007 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.396783113 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.397080898 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.397110939 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.403685093 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.403714895 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.403768063 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.403846025 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.404309988 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.404325962 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.404340029 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.404347897 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.408762932 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.408790112 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.409550905 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.411703110 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.411717892 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.423382998 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.427798033 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.427824020 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.429264069 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.429270983 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.538676023 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.565062046 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.565103054 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.567750931 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.567758083 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.630712986 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.631217957 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.631239891 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.631750107 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.631756067 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.686048985 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.686136961 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.686180115 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.686229944 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.686269045 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.686291933 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.686327934 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.687537909 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.687638044 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.687648058 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.687700033 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.687725067 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.687755108 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.687769890 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.687777996 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.687803030 CET	49970	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.687808037 CET	443	49970	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.692821026 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.692861080 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.693243980 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.693305969 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.693311930 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.695533991 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.695561886 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.695621014 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.695646048 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.695662975 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.695715904 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.695828915 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.695842981 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.695868015 CET	49971	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.695873022 CET	443	49971	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.699361086 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.699399948 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.699466944 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.699594021 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.699609041 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.912710905 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.912735939 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.912750959 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.912831068 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:57.912848949 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:57.912900925 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.033875942 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.033911943 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.033960104 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.033972979 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.033984900 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.034030914 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.034054041 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.034436941 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.034451962 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.034462929 CET	49972	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.034468889 CET	443	49972	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.038172007 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.038213015 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.038301945 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.038494110 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.038505077 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.141376019 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.141983032 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.142005920 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.142486095 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.142492056 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.159068108 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.159715891 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.159734011 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.160459995 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.160464048 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.275515079 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.275574923 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.275664091 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.275691986 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.275880098 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.278997898 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.279019117 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.279032946 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.279042006 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.282093048 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.282139063 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.282232046 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.282356024 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.282365084 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.293637991 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.293665886 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.293724060 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.293725967 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.293770075 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.293971062 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.293984890 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.294040918 CET	49974	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.294049025 CET	443	49974	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.296571016 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.296597004 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.296665907 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.296863079 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.296873093 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.428575039 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.429090023 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.429126978 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.429564953 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.429570913 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.440696955 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.441608906 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.441636086 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.442255974 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.442261934 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.561865091 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.561934948 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.561999083 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.562262058 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.562284946 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.562299013 CET	49975	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.562304020 CET	443	49975	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.566032887 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.566083908 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.566169977 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.567184925 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.567200899 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.571521997 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.571784973 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.571868896 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.571868896 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.571907043 CET	49976	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.571923018 CET	443	49976	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.574278116 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.574321032 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.574525118 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.574700117 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.574712992 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.807065964 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.811208010 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.811244965 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.811841965 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.811847925 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.943804026 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.943974018 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.947669029 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.967607021 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.967637062 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.967668056 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.967678070 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.975944996 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:58.975999117 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:58.977689028 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.008476973 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.019656897 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.019687891 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.020649910 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.020680904 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.021301985 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.021306038 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.037729979 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.038330078 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.038356066 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.038888931 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.038892984 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.146625042 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.146733999 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.147664070 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.171212912 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.171267986 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.171339989 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.171706915 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.294070005 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.294070005 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.294109106 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.294121027 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.296503067 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.296503067 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.296539068 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.296550035 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.300544977 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.300591946 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.300772905 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.301578999 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.301597118 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.301758051 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.302570105 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.302570105 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.302603006 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.302617073 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.305030107 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.305780888 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.305780888 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.305816889 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.305835962 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.434736013 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.435220003 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.435348988 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.435348988 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.435391903 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.435414076 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.438472033 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.438602924 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.438733101 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.438733101 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.438774109 CET	49981	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.438791037 CET	443	49981	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.743429899 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.744033098 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.744060993 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.744447947 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.744452953 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.872558117 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.872730970 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.872795105 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.872879028 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.872904062 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:18:59.872919083 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:18:59.872926950 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.040508986 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.041141987 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:19:00.041184902 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.041729927 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:19:00.041735888 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.171123981 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.171638012 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.171690941 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:19:00.171740055 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:19:00.171761990 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:00.171772957 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 17:19:00.171777964 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 17:19:03.722948074 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:19:03.723052025 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:19:03.723853111 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:19:03.977221966 CET	49704	443	192.168.2.7	76.223.125.47
Oct 30, 2024 17:19:03.977252960 CET	443	49704	76.223.125.47	192.168.2.7
Oct 30, 2024 17:19:04.226083994 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:04.226130962 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:04.226198912 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:04.226742983 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:04.226758003 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:05.098463058 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:05.099751949 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:05.099781990 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:05.100266933 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:05.100728989 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:05.100820065 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:05.143882990 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:15.092597008 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:15.092670918 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:15.092816114 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:16.396493912 CET	49985	443	192.168.2.7	142.250.185.132
Oct 30, 2024 17:19:16.396539927 CET	443	49985	142.250.185.132	192.168.2.7
Oct 30, 2024 17:19:22.934761047 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:22.934807062 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:22.934891939 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:22.935610056 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:22.935622931 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:22.935893059 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:22.935939074 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:22.936016083 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:22.936151981 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:22.936168909 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.540889025 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.541290998 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.541322947 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.542625904 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.542704105 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.543426991 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.547796965 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.547826052 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.549370050 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.549427032 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.808135033 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.808199883 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.808279037 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.809161901 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.809417963 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.809438944 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.809461117 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.809798002 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.809943914 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.810565948 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.810606003 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.810683966 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.811147928 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.811172009 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.812596083 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.812618971 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.812938929 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.812964916 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.910192013 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.910335064 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.942449093 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.942549944 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.942718029 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.943320036 CET	49987	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.943336964 CET	443	49987	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.945049047 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.945111036 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:23.945259094 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.945446968 CET	49986	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:23.945462942 CET	443	49986	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.423669100 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.424632072 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.424657106 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.425750017 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.425868988 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.426312923 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.426393986 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.426651001 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.426657915 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.427129984 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.427553892 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.427571058 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.428653955 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.428709030 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.431719065 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.431830883 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.432073116 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.432082891 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.555486917 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.555700064 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.556080103 CET	49990	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.556104898 CET	443	49990	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.561517954 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:24.561583042 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.561809063 CET	49989	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:24.561825991 CET	443	49989	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.286283016 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.286314011 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.286386013 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.287798882 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.287818909 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.900156975 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.900762081 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.900783062 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.901762962 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.901813984 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.902132988 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.902177095 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.902276993 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.943325043 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.005732059 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.005764961 CET	443	49991	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.005986929 CET	49991	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.318594933 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.318655968 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.318790913 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.319040060 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.319053888 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.932642937 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.934880972 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.934899092 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.936423063 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.936495066 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.937841892 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.937922955 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:26.939002991 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.939009905 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:27.045111895 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:27.045310020 CET	443	49994	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:27.045382023 CET	49994	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:29.198234081 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:29.198282957 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:29.198353052 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:29.198844910 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:29.198863029 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:29.938762903 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:29.945903063 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:29.945919037 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:29.947372913 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:29.947446108 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:30.033916950 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:30.034070969 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:30.034090996 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:30.034142971 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:30.117759943 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:30.117783070 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:30.160718918 CET	443	49998	96.7.168.138	192.168.2.7
Oct 30, 2024 17:19:30.160883904 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:30.220895052 CET	49998	443	192.168.2.7	96.7.168.138
Oct 30, 2024 17:19:30.220932961 CET	443	49998	96.7.168.138	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 17:18:01.504985094 CET	53	53301	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:01.505254984 CET	53	61924	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:02.754429102 CET	53	52104	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:03.105484962 CET	57022	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:18:03.105664015 CET	62138	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:18:03.114132881 CET	53	62138	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:03.114149094 CET	53	57022	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:03.427988052 CET	123	123	192.168.2.7	20.101.57.9
Oct 30, 2024 17:18:03.671653032 CET	123	123	20.101.57.9	192.168.2.7
Oct 30, 2024 17:18:04.248250008 CET	51976	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:18:04.250883102 CET	65239	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:18:04.255436897 CET	53	51976	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:04.258419991 CET	53	65239	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:04.300631046 CET	61719	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:18:04.300873995 CET	58617	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:18:04.330967903 CET	53	61719	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:04.354924917 CET	53	58617	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:20.090399027 CET	53	57631	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:38.849253893 CET	53	61376	1.1.1.1	192.168.2.7
Oct 30, 2024 17:18:57.592308998 CET	138	138	192.168.2.7	192.168.2.255
Oct 30, 2024 17:19:00.013942957 CET	53	52539	1.1.1.1	192.168.2.7
Oct 30, 2024 17:19:01.916261911 CET	53	53753	1.1.1.1	192.168.2.7
Oct 30, 2024 17:19:22.839523077 CET	61475	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:19:22.846854925 CET	53	61475	1.1.1.1	192.168.2.7
Oct 30, 2024 17:19:24.982255936 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.285563946 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.571580887 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.572129965 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.572144985 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:25.572921038 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:25.652355909 CET	51909	53	192.168.2.7	1.1.1.1
Oct 30, 2024 17:19:25.893250942 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:26.016511917 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:28.092050076 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:28.092530012 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:28.217011929 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:28.217030048 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:28.217076063 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:28.217087030 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:28.217565060 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:28.217650890 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:28.341064930 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:28.368194103 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:29.071976900 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:29.195394993 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:29.196609974 CET	443	63722	172.64.41.3	192.168.2.7
Oct 30, 2024 17:19:29.224050045 CET	63722	443	192.168.2.7	172.64.41.3
Oct 30, 2024 17:19:40.728494883 CET	63722	443	192.168.2.7	172.64.41.3

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 30, 2024 17:18:04.354999065 CET	192.168.2.7	1.1.1.1	c28f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 17:18:03.105484962 CET	192.168.2.7	1.1.1.1	0xc584	Standard query (0)	mandrillapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:03.105664015 CET	192.168.2.7	1.1.1.1	0xb315	Standard query (0)	mandrillapp.com	65	IN (0x0001)	false
Oct 30, 2024 17:18:04.248250008 CET	192.168.2.7	1.1.1.1	0x1c00	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.250883102 CET	192.168.2.7	1.1.1.1	0x6101	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:18:04.300631046 CET	192.168.2.7	1.1.1.1	0x272b	Standard query (0)	cas.campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.300873995 CET	192.168.2.7	1.1.1.1	0xe88c	Standard query (0)	cas.campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:19:22.839523077 CET	192.168.2.7	1.1.1.1	0xf175	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:19:25.652355909 CET	192.168.2.7	1.1.1.1	0xd309	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 17:18:03.114149094 CET	1.1.1.1	192.168.2.7	0xc584	No error (0)	mandrillapp.com		76.223.125.47	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:03.114149094 CET	1.1.1.1	192.168.2.7	0xc584	No error (0)	mandrillapp.com		15.197.175.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.255436897 CET	1.1.1.1	192.168.2.7	0x1c00	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.258419991 CET	1.1.1.1	192.168.2.7	0x6101	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:18:04.330967903 CET	1.1.1.1	192.168.2.7	0x272b	No error (0)	cas.campaignagent.com.au	monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:18:04.330967903 CET	1.1.1.1	192.168.2.7	0x272b	No error (0)	monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com		13.211.59.59	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.330967903 CET	1.1.1.1	192.168.2.7	0x272b	No error (0)	monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com		54.253.181.184	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.330967903 CET	1.1.1.1	192.168.2.7	0x272b	No error (0)	monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com		54.206.214.110	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:04.354924917 CET	1.1.1.1	192.168.2.7	0xe88c	No error (0)	cas.campaignagent.com.au	monolith-production-alb-1020186593.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:18:28.543623924 CET	1.1.1.1	192.168.2.7	0x4ecf	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:28.543623924 CET	1.1.1.1	192.168.2.7	0x4ecf	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:53.936220884 CET	1.1.1.1	192.168.2.7	0x7918	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:18:53.936220884 CET	1.1.1.1	192.168.2.7	0x7918	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:19:22.846854925 CET	1.1.1.1	192.168.2.7	0xf175	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:19:22.846854925 CET	1.1.1.1	192.168.2.7	0xf175	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:19:25.660928011 CET	1.1.1.1	192.168.2.7	0xd309	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:19:41.300928116 CET	1.1.1.1	192.168.2.7	0xed05	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:19:41.300928116 CET	1.1.1.1	192.168.2.7	0xed05	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mandrillapp.com

cas.campaignagent.com.au

otelrules.azureedge.net

fs.microsoft.com

slscr.update.microsoft.com

chrome.cloudflare-dns.com

armmf.adobe.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49705	76.223.125.47	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:03 UTC	1184	OUT	GET /track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ HTTP/1.1 Host: mandrillapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:18:04 UTC	658	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 16:18:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: PHPSESSID=55h2v8bq6d88j4n1frmvmb03fc; expires=Thu, 31 Oct 2024 02:18:04 GMT; Max-Age=36000; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=55h2v8bq6d88j4n1frmvmb03fc; path=/; secure; HttpOnly; SameSite=Strict Location: https://cas.campaignagent.com.au/statement/CPN-9315437/pdf/fa718199-2140-4641-8086-b217004395a1?s-token=WgxjYn%2BfJDNjRvMnIkUv2sSeqAWZGAP7hQe4UPsasys%3D
2024-10-30 16:18:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49709	13.211.59.59	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:05 UTC	786	OUT	GET /statement/CPN-9315437/pdf/fa718199-2140-4641-8086-b217004395a1?s-token=WgxjYn%2BfJDNjRvMnIkUv2sSeqAWZGAP7hQe4UPsasys%3D HTTP/1.1 Host: cas.campaignagent.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:18:08 UTC	1657	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:08 GMT Content-Type: application/pdf Content-Length: 127821 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Server: Kestrel Request-Context: appId= Strict-Transport-Security: max-age=5184000; includeSubDomains; preload Content-Disposition: attachment; filename=CampaignStatementCPN-9315437ByCampaignAgent.pdf; filename=UTF-8''CampaignStatementCPN-9315437ByCampaignAgent.pdf X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1 Content-Security-Policy-Report-Only: default-src 'self'; frame-src 'self' data: campaignagent.au.looker.com .campaignagent.com.au .trustpilot.com .hs-forms.com .hsforms.com player.vimeo.com .okta.com; font-src 'self' .gstatic.com .elev.io .campaignagent.com.au .google-analytics.com https://use.typekit.net https://cdnjs.cloudflare.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .jsdelivr.net .elev.io .sentry-cdn.com .highcharts.com .msecnd.net .cloudflare.com .google-analytics.com .googletagmanager.com .lr-in-prod.com .trustpilot.com .hsforms.com .hsforms.net https://code.jquery.com; style-src 'self' 'unsafe-inline' .campaignagent.com.au .googleapis.com .jsdelivr.net .cloudflare.com .typekit.net; connect-src 'self' .campaignagent.com.au .elev.io .visualstudio.com .sentry.io .doubleclick.net .google-analytics.com .lr-in-prod.com .hsforms.com .googletagmanager.com javascript:; img-src * data:; frame-ancestors 'self'; worker-src blob:; report-uri /api/csp-violations/n [TRUNCATED] X-Correlation-ID: 1c05bf15-e5d4-4f16-9415-9364d8216d8f
2024-10-30 16:18:08 UTC	965	IN	Data Raw: 25 50 44 46 2d 31 2e 34 0d 0a 25 b4 b5 b6 b7 0d 0a 25 0d 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 0d 0a 2f 50 61 67 65 73 20 32 20 30 20 52 0d 0a 2f 54 79 70 65 20 2f 43 61 74 61 6c 6f 67 0d 0a 2f 56 69 65 77 65 72 50 72 65 66 65 72 65 6e 63 65 73 20 33 20 30 20 52 0d 0a 2f 44 65 73 74 73 20 34 20 30 20 52 0d 0a 2f 50 61 67 65 4d 6f 64 65 20 2f 55 73 65 4e 6f 6e 65 0d 0a 2f 50 61 67 65 4c 61 79 6f 75 74 20 2f 4f 6e 65 43 6f 6c 75 6d 6e 0d 0a 3e 3e 0d 0a 0d 0a 65 6e 64 6f 62 6a 0d 0a 32 20 30 20 6f 62 6a 0d 0a 3c 3c 0d 0a 2f 43 6f 75 6e 74 20 31 0d 0a 2f 54 79 70 65 20 2f 50 61 67 65 73 0d 0a 2f 4b 69 64 73 20 5b 35 20 30 20 52 5d 0d 0a 3e 3e 0d 0a 0d 0a 65 6e 64 6f 62 6a 0d 0a 35 20 30 20 6f 62 6a 0d 0a 3c 3c 0d 0a 2f 43 6f 6e 74 65 6e 74 73 20 5b 36 20 30 20 Data Ascii: %PDF-1.4%%1 0 obj<</Pages 2 0 R/Type /Catalog/ViewerPreferences 3 0 R/Dests 4 0 R/PageMode /UseNone/PageLayout /OneColumn>>endobj2 0 obj<</Count 1/Type /Pages/Kids [5 0 R]>>endobj5 0 obj<</Contents [6 0
2024-10-30 16:18:08 UTC	16384	IN	Data Raw: 54 69 74 6c 65 20 66 61 6c 73 65 0d 0a 2f 4e 6f 6e 46 75 6c 6c 53 63 72 65 65 6e 42 65 68 61 76 69 6f 72 20 2f 55 73 65 4e 6f 6e 65 0d 0a 2f 48 69 64 65 57 69 6e 64 6f 77 55 49 20 66 61 6c 73 65 0d 0a 2f 48 69 64 65 4d 65 6e 75 62 61 72 20 66 61 6c 73 65 0d 0a 2f 48 69 64 65 54 6f 6f 6c 62 61 72 20 66 61 6c 73 65 0d 0a 3e 3e 0d 0a 0d 0a 65 6e 64 6f 62 6a 0d 0a 31 30 20 30 20 6f 62 6a 0d 0a 3c 3c 0d 0a 2f 50 72 6f 64 75 63 65 72 20 28 53 65 6c 65 63 74 2e 50 64 66 20 66 6f 72 20 2e 4e 45 54 20 76 32 30 32 33 2e 32 2e 30 29 0d 0a 3e 3e 0d 0a 0d 0a 65 6e 64 6f 62 6a 0d 0a 39 20 30 20 6f 62 6a 0d 0a 3c 3c 0d 0a 2f 53 75 62 74 79 70 65 20 2f 46 6f 72 6d 0d 0a 2f 42 42 6f 78 20 5b 30 2e 30 30 30 30 30 20 30 2e 30 30 30 30 30 20 35 33 35 2e 30 30 30 30 30 20 35 Data Ascii: Title false/NonFullScreenBehavior /UseNone/HideWindowUI false/HideMenubar false/HideToolbar false>>endobj10 0 obj<</Producer (Select.Pdf for .NET v2023.2.0)>>endobj9 0 obj<</Subtype /Form/BBox [0.00000 0.00000 535.00000 5
2024-10-30 16:18:08 UTC	8192	IN	Data Raw: 87 78 8c 5d 45 08 2e af f2 4b 76 fc 91 e6 9e 1f d2 35 4d 77 56 8b 4c d1 b4 fb 9b fb c9 ce 23 82 de 32 ee df 80 ed ef d0 57 d2 5f 07 ff 00 65 19 65 58 75 2f 88 9a 83 42 0f cd fd 95 62 e0 b7 d2 49 79 03 e8 99 ff 00 78 57 d0 3f 0b fe 1e 78 4f e1 f6 91 f6 1f 0d 69 71 c0 cc 31 35 d4 9f 3d c5 c7 fb ef d4 fd 38 03 b0 15 d4 57 d0 61 72 78 47 de ad ab ed d0 fc 43 88 bc 4d c6 62 9b a3 96 af 67 0f e6 7f 1b fd 23 f2 bb f3 46 2f 82 fc 25 e1 9f 08 e9 ff 00 62 f0 d6 89 67 a6 c3 8c 37 91 18 0c ff 00 ef 39 f9 98 fb 92 6b 6a 8a 2b d8 8c 63 15 68 ab 23 f3 0a b5 aa 56 9b a9 56 4e 52 7b b6 ee df cc 28 a2 8a a3 30 ae 43 e3 17 c3 7f 0d 7c 48 f0 db e9 ba e5 aa 8b 84 53 f6 3b f8 d4 79 d6 ad ea a7 b8 f5 53 c1 fa e0 8e be 8a 8a 94 e3 52 2e 32 57 4c e8 c2 e2 ab e1 6b 46 bd 09 b8 ce Data Ascii: x]E.Kv5MwVL#2W_eeXu/BbIyxW?xOiq15=8WarxGCMbg#F/%bg79kj+ch#VVNR{(0C\|HS;ySR.2WLkF
2024-10-30 16:18:08 UTC	8192	IN	Data Raw: 9e 0b 03 3e 6a 71 77 93 d6 cd ec 96 bb a5 af 93 bf 90 51 45 15 ed 1f 96 05 7c ed fb 7f f8 fe 6d 1f c2 f6 7e 07 d3 a6 31 dc 6b 4a 67 be 65 3c 8b 65 38 0b ff 00 03 60 7f 04 23 bd 7d 13 5f 0c fe dd 86 e8 fe d0 d7 df 68 07 cb 16 56 df 66 cf 74 f2 c6 71 ff 00 03 df 5e 66 6d 56 54 f0 d6 5d 5d 8f ba f0 eb 2f a3 8d cf e1 ed 75 54 d3 9d bb b5 64 be e6 ef f2 3c 76 8a 29 d0 c7 24 b3 2c 51 23 49 24 8c 15 11 46 4b 13 d0 01 dc d7 ca 1f d2 db 0d af 52 fd 9c fe 0b 6b 7f 13 35 45 bc 98 49 61 e1 eb 79 31 73 7c 57 99 48 3c c7 0e 7a b7 bf 45 ef ce 01 ef 3f 67 9f d9 9a ff 00 56 92 0d 7b e2 24 32 58 e9 fc 3c 5a 4e 4a dc 5c 7f d7 52 39 8d 7d be f1 ff 00 67 bf d6 5a 4d 85 96 99 a6 c1 a7 e9 d6 90 da da 5b 20 8e 18 21 40 89 1a 8e 80 01 c0 15 ec 60 72 b9 54 b4 ea e9 1e dd 59 f9 4f Data Ascii: >jqwQE\|m~1kJge<e8`#}_hVftq^fmVT]]/uTd<v)$,Q#I$FKRk5EIay1s\|WH<zE?gV{$2X<ZNJ\R9}gZM[ !@`rTYO
2024-10-30 16:18:09 UTC	16384	IN	Data Raw: 7f b4 f7 fc 9c 07 8a ff 00 ec 24 ff 00 c8 57 87 9d ff 00 0e 1e a7 ea be 13 7f c8 d2 bf f8 3f f6 e4 70 74 51 45 7c e9 fb d8 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 57 a9 7e c5 bf f2 73 1e 1a ff 00 b7 bf fd 24 9a bc b6 bd 4b f6 2d ff 00 93 98 f0 d7 fd bd ff 00 e9 24 d5 d1 84 ff 00 78 a7 ea bf 33 c5 e2 Data Ascii: $W?ptQE\|QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEW~s$K-$x3
2024-10-30 16:18:09 UTC	8192	IN	Data Raw: d5 d7 d8 34 da b7 5f 4d 75 95 23 bb 34 f8 49 cd 4b 1a 82 ba fa 3a 13 67 cc 16 67 96 8d 99 25 9b 25 52 31 cb c1 eb dc 77 b8 21 bd d3 d8 b8 43 52 5d f7 8c 11 c4 1b f7 f5 77 c1 58 82 00 a0 84 f7 88 c1 20 05 02 44 d2 e4 45 cf c1 1e 49 45 dc 40 0c f5 10 7d 51 06 2c d9 a4 39 9b a4 28 c0 85 32 08 65 6a 61 58 d5 42 b8 0e 84 82 f6 92 5a 20 42 a8 a6 ae ae 9e db b7 f2 b3 d3 60 32 c9 0f 7c 69 ed 9e 58 d4 fd d2 37 1f 7e 33 35 f7 7b 9f 4c c5 ab 7b 96 b6 78 b0 6a ec d3 28 9e 8e ef 7b f4 fa ef 5d d9 77 f4 b9 97 77 af 5f ff 9d 43 63 67 27 49 d5 95 94 f7 17 03 9e 2c 81 d1 af c1 db e9 e8 1f 45 da c2 e9 21 7d 56 93 2f 0c 2b 8d fa ec 34 cd 4c 6d 8b ae b5 84 7f 49 83 e3 f1 49 71 a5 b6 bb f6 a5 da d3 b5 ff d4 0a a8 16 4f d3 6c 0f 5f 53 f5 58 e4 68 e4 58 d5 f3 55 a7 c2 a7 a2 bf Data Ascii: 4_Mu#4IK:gg%%R1w!CR]wX DEIE@}Q,9(2ejaXBZ B`2\|iX7~35{L{xj({]ww_Ccg'I,E!}V/+4LmIIqOl_SXhXU
2024-10-30 16:18:09 UTC	8192	IN	Data Raw: 85 13 5d d2 9b 5d e3 36 43 71 ed e0 84 f4 cc 73 c0 69 09 7a 44 f3 bc dd 60 90 2d 54 a4 43 ec 49 cb 39 d8 da 3a 4e 4c 9b 56 24 14 77 7d bd ba 5d 51 63 a4 de ab 26 f4 a3 60 68 84 4a 04 2b 6d de 47 8a 8f be a9 d1 44 c2 06 42 29 03 a1 0a 93 81 e9 50 b4 65 67 19 66 01 f1 d1 41 9a 40 63 8e d0 34 97 2b 12 1e 37 2d c0 b2 28 5a 19 27 a0 ee 6f 9e 68 3a 51 34 af 69 35 13 a0 49 ed 8e e0 ee 48 6f 64 77 64 6f e4 6c 44 25 47 16 46 88 42 1f 11 0a 33 35 35 b5 cc 9f d4 50 f4 2b 53 45 3f 1c 65 be 52 e5 f6 d4 ba e2 01 eb dc 12 43 3c 60 99 1b 0e 95 ba a7 c9 81 d0 0c bd 5b 6f dd 0d 4d c9 22 54 a2 17 ac 16 ed 6e 0d d6 64 29 72 0d 35 67 a8 a7 98 9a 32 dc 26 bd de e0 36 44 5c 4a 22 eb a2 71 9e ba 86 da dd 2e bc d0 85 bb 5d bd ae dd ae bd ae b3 2e 95 6b 28 3c f4 50 f1 50 3e 54 7b Data Ascii: ]]6CqsizD`-TCI9:NLV$w}]Qc&`hJ+mGDB)PegfA@c4+7-(Z'oh:Q4i5IHodwdolD%GFB355P+SE?eRC<`[oM"Tnd)r5g2&6D\J"q.].k(<PP>T{
2024-10-30 16:18:09 UTC	8192	IN	Data Raw: d0 de c2 f5 eb 73 9d 83 69 59 4e 6d a6 7f 37 91 98 d3 d9 66 fd 47 ae dd 41 c6 d9 e5 24 65 0b e7 0f ac 35 b9 46 69 9d 3b 0a 3f 87 e3 48 79 1e ce 34 75 47 8f e5 75 c5 fe d4 81 cf 04 9c 0f dd 3a eb 16 6b 4c 40 bf dd 02 b6 7e df 0c fd 0c fa 50 e0 0a 34 85 cf 18 9c 0f 03 23 26 e3 ee d2 32 2a cf 0b 24 e6 0e 1b d3 e6 0d 06 7d 28 31 ba 68 19 f9 ee 5b c0 79 1e d7 bf 6c 72 2d e4 39 87 f3 20 f3 da bd 11 9e 7f 9c 0f cc fd 89 71 fd db 66 7e 53 9c 72 77 ca d1 29 17 e7 b9 9d fc 3a e9 3b f1 fe d4 f7 f8 53 df cb cf f5 dc e7 cb 7b 28 68 93 ef 80 ff b1 25 9f dd eb d0 52 be b9 0e 1a f1 e0 7d f0 bd d4 59 b8 3d 67 d8 74 40 9d f9 0a bc 06 be b1 39 2a b1 ce a9 74 10 ff 07 75 e0 6d a2 d0 30 cd ea 01 9f 89 61 9c 77 62 9d bf 89 77 a1 27 77 f5 46 9a bf e3 f0 dc 17 ca fe 70 51 8b e5 Data Ascii: siYNm7fGA$e5Fi;?Hy4uGu:kL@~P4#&2$}(1h[ylr-9 qf~Srw):;S{(h%R}Y=gt@9tum0awbw'wFpQ
2024-10-30 16:18:09 UTC	8192	IN	Data Raw: 3b 34 03 35 67 37 67 7f 0b e8 1e 02 12 f6 61 74 39 ba 08 1d 87 a7 fc 02 ee 70 21 77 18 d5 65 2e 21 3b b3 13 b8 d5 f0 bc 1f a0 69 d9 67 b3 25 d8 82 96 66 57 a2 29 e8 10 7a 5a 12 d0 7c 29 09 7d dc 8d 7f 03 cf 7b 03 5a 44 a6 67 af e2 16 65 96 41 3b dc 0b ad 90 82 d6 ba 1a e4 cf 9d 7c 07 7f 2b ff 0d da 0c 3c ff 20 c8 9b ad c0 37 cf 01 e7 50 de 47 a9 4b 6f bf 6a ed 9a 8e d5 ab ae bc 62 e5 8a e5 cb 96 2e 59 bc e8 f2 b6 96 d9 e9 59 33 a7 5c 32 26 d5 7c de b9 4d e7 8c 6e 1c d5 30 a2 be ae 76 78 4d f5 b0 a1 55 c9 ca 8a 21 e5 89 78 59 ac 34 1a 29 09 17 87 82 01 bf cf eb 71 bb 8a 9c 0e dd 6e d3 54 ab 45 91 25 51 e0 39 82 51 d5 f8 d8 84 f6 48 77 a2 bd 9b 4f c4 2e bc 70 28 dd 8e cd 87 1d f3 0b 76 b4 77 47 60 d7 84 c1 65 ba 23 ed ac 58 64 70 c9 14 94 5c fc 6f 25 53 46 Data Ascii: ;45g7gat9p!we.!;ig%fW)zZ\|)}{ZDgeA;\|+< 7PGKojb.YY3\2&\|Mn0vxMU!xY4)qnTE%Q9QHwO.p(vwG`e#Xdp\o%SF
2024-10-30 16:18:09 UTC	16384	IN	Data Raw: 18 96 80 3f f4 2f cd 94 a1 26 18 1d 35 70 36 62 16 36 66 63 56 c1 5d 8a b3 12 5c b7 3d 2b 9d 4e 8c 8c a1 06 24 e3 62 c3 9b 23 05 e6 2c 20 a4 ce 11 2d 88 fa da 48 0c 47 6b 8d 51 87 44 2c 0a c7 1a 98 20 06 fa 41 92 d8 f6 fa da c5 4b 6e bf 77 76 e7 4f 37 67 be 83 cf bd 79 d4 45 93 26 dc f2 58 e6 5d 7c c5 65 89 b1 73 46 cf 7c 60 73 66 87 70 a0 75 ff a2 cb 9e a9 2b 3f d4 b9 64 67 fb 70 6e ba c3 b3 78 f2 c4 55 15 67 b6 4a ea a8 15 13 a6 5f 4f 47 21 16 67 3f 11 ae 11 de 44 c5 b8 9a e5 17 2c 20 cb 8b 09 36 dc 3b d6 36 9f a6 e6 51 2a 82 6a b5 05 68 35 ba aa b8 13 dd 56 bc 05 3d 22 3c cf 3d ad ed e7 7a b4 57 b5 37 d0 f1 e2 7f 14 3b 6c ce 62 47 71 31 57 29 0e 71 54 86 22 25 17 68 69 d7 6c 77 da bf 54 58 51 7c 83 f3 2e e7 23 dc c3 b6 47 42 db f0 53 64 9b e3 b7 b6 22 Data Ascii: ?/&5p6b6fcV]\=+N$b#, -HGkQD, AKnwvO7gyE&X]\|esF\|`sfpu+?dgpnxUgJ_OG!g?D, 6;6Q*jh5V="<=zW7;lbGq1W)qT"%hilwTXQ\|.#GBSd"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:07 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:07 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:07 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161807Z-16849878b78qfbkc5yywmsbg0c00000007z000000000c4rd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:07 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 16:18:07 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-30 16:18:07 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-30 16:18:07 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-30 16:18:07 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-30 16:18:07 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-30 16:18:07 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-30 16:18:08 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-30 16:18:08 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-30 16:18:08 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49711	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:18:08 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25936 Date: Wed, 30 Oct 2024 16:18:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:08 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b7867ttgfbpnfxt44s000000086g00000000682m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:09 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:08 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5d69bbb7-d01e-008e-6d6a-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-r197bdfb6b48pl4k4a912hk2g400000007gg00000000bs4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:09 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:08 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b78p8hrf1se7fucxk8000000093000000000qg7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:09 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:08 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b78fhxrnedubv5byks00000006gg00000000tkh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:09 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:08 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b78nzcqcd7bed2fb6n00000000mg00000000vtc2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:18:09 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25961 Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 16:18:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-15b8d89586flspj6y6m5fk442w0000000e5000000000d06p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:10 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:09 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b78nx5sne3fztmu6xc000000099g000000007yy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:09 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b78qf2gleqhwczd21s00000008g0000000009w79 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:10 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161809Z-16849878b78p8hrf1se7fucxk8000000094000000000hrwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:11 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161810Z-15b8d89586f8l5961kfst8fpb00000000kzg00000000awg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:11 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161811Z-16849878b78zqkvcwgr6h55x9n00000007pg00000000p1w2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:11 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161811Z-16849878b78z2wx67pvzz63kdg00000006y0000000007cuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:11 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:11 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161811Z-16849878b7898p5f6vryaqvp58000000092g00000000hy12 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:11 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:11 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:11 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161811Z-16849878b7828dsgct3vrzta7000000006s00000000066md x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:11 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:12 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 8b96f0ab-501e-008c-5135-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161812Z-17c5cb586f6z6tq2xr35mhd5x000000000r000000000ubym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:12 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161812Z-16849878b78km6fmmkbenhx76n00000007k000000000q4gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:12 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30dbe6fd-101e-0034-66db-2696ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161812Z-17c5cb586f6fqqst87nqkbsx1c00000006s0000000009y46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:12 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:12 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: d5e28e91-a01e-0021-638f-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161812Z-r197bdfb6b4grkz4xgvkar0zcs00000007y000000000ek61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:12 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:12 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161812Z-16849878b78tg5n42kspfr0x48000000089g00000000d6g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:12 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:13 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161813Z-15b8d89586fdmfsg1u7xrpfws00000000cn00000000023h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:13 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161813Z-16849878b786lft2mu9uftf3y400000009d000000000y2zh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:13 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8d7929b6-101e-0017-6edc-2647c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161813Z-17c5cb586f6wmhkn5q6fu8c5ss00000007r0000000007vsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:13 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161813Z-15b8d89586f42m673h1quuee4s0000000c8000000000nt43 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:13 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161813Z-16849878b782d4lwcu6h6gmxnw00000008000000000073st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:14 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161814Z-16849878b78zqkvcwgr6h55x9n00000007kg000000010zdk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:14 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:14 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161814Z-16849878b78smng4k6nq15r6s400000009q000000000uggg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:14 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:14 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161814Z-16849878b78j7llf5vkyvvcehs00000009cg00000000b5rs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:14 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161814Z-16849878b78sx229w7g7at4nkg00000006g000000000hgtr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:14 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 128a8aa7-901e-005b-27fd-272005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161814Z-15b8d89586fvk4kmbg8pf84y88000000092000000000n3nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49732	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NMTn3OpAd22+Zz3&MD=fl2EtoCo HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 16:18:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1921cf44-488f-45f7-9afd-0e8ca010db45 MS-RequestId: 7b1048c1-279e-4524-b331-a48b8aa604a8 MS-CV: 1rbwwAXLsUmWSb5f.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 16:18:14 GMT Connection: close Content-Length: 24490
2024-10-30 16:18:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 16:18:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161815Z-16849878b78j5kdg3dndgqw0vg00000009wg00000000tz9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:15 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 860be216-201e-0071-14dc-2aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161815Z-r197bdfb6b4c8q4qvwwy2byzsw00000008s0000000001wdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:15 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 3b7c5db9-101e-0046-71c7-2791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161815Z-15b8d89586fcvr6p5956n5d0rc0000000e9g00000000dufh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:15 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161815Z-16849878b78smng4k6nq15r6s400000009wg0000000006at x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:15 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161815Z-16849878b786lft2mu9uftf3y400000009e000000000tsku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:15 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:16 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161816Z-16849878b7828dsgct3vrzta7000000006kg00000000xf98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:16 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5cde4d2e-001e-0046-6764-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161816Z-r197bdfb6b4xfp4mncra29rqkc00000001u00000000022cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:16 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:16 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:16 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161816Z-16849878b78nx5sne3fztmu6xc000000093g00000000z17q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:16 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:16 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161816Z-16849878b78g2m84h2v9sta290000000071g00000001080b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:16 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:16 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:16 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161816Z-16849878b78tg5n42kspfr0x48000000089g00000000d6se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:16 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b14e1d55-401e-0078-709c-274d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-17c5cb586f626sn8grcgm1gf8000000006w00000000003dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-15b8d89586fmc8ck21zz2rtg1w00000005eg00000000dt2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:17 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 174f78f2-a01e-0032-607a-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-15b8d89586fvk4kmbg8pf84y88000000093000000000gqb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:17 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-16849878b78nzcqcd7bed2fb6n00000000p000000000pp8f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:17 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2eb4648-201e-0051-526d-287340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-r197bdfb6b4g24ztpxkw4umce800000009u000000000g9qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-16849878b78bjkl8dpep89pbgg00000006zg00000000d78f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-16849878b78fhxrnedubv5byks00000006hg00000000q28y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161817Z-16849878b78j5kdg3dndgqw0vg0000000a10000000007v80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:17 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161818Z-16849878b78j5kdg3dndgqw0vg00000009y000000000n1zg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:18 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161818Z-16849878b78nzcqcd7bed2fb6n00000000n000000000uvyp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:18 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161818Z-16849878b78sx229w7g7at4nkg00000006e000000000tvs7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:18 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161818Z-16849878b78z2wx67pvzz63kdg00000006yg000000004zwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:18 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: e5751b3d-f01e-0099-0a8e-299171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161818Z-r197bdfb6b4g24ztpxkw4umce800000009tg00000000gh39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:19 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161819Z-16849878b78qfbkc5yywmsbg0c00000007w000000000rrut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:19 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161819Z-16849878b78j5kdg3dndgqw0vg00000009xg00000000q9cc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:19 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161819Z-16849878b78fkwcjkpn19c5dsn000000078g00000000hswx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:19 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:19 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161819Z-16849878b78tg5n42kspfr0x48000000086000000000uu5t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:19 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:19 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:19 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161819Z-16849878b78fhxrnedubv5byks00000006kg00000000hqf7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:19 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:19 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:20 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161820Z-17c5cb586f6gkqkwd0x1ge8t0400000008tg00000000cdam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:20 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:20 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161820Z-16849878b78smng4k6nq15r6s400000009vg000000004q9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:20 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3281a84b-401e-0029-700c-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161820Z-17c5cb586f6zcqf8r7the4ske000000000kg00000000bwg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:20 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:20 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161820Z-16849878b78smng4k6nq15r6s400000009rg00000000p5vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:20 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:20 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161820Z-16849878b78bjkl8dpep89pbgg00000006wg00000000t3ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:20 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161820Z-16849878b78fhxrnedubv5byks00000006pg0000000051p8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:21 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 16c434fb-a01e-0032-1c41-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161821Z-17c5cb586f62blg5ss55p9d6fn000000099g000000000gqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:21 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161821Z-16849878b78z2wx67pvzz63kdg00000006yg000000005051 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:21 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161821Z-16849878b78wv88bk51myq5vxc00000008gg00000000mgzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:21 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:21 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161821Z-16849878b78bcpfn2qf7sm6hsn00000009u000000000rtqg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:21 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:21 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161821Z-16849878b78nzcqcd7bed2fb6n00000000u00000000009ye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:22 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161822Z-15b8d89586fmhjx6a8nf3qm53c000000025g000000007cug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:22 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: deb87e8e-601e-0001-3532-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161822Z-r197bdfb6b4cxj4bmw6ag8gees00000000v000000000qy3w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:22 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161822Z-16849878b78nx5sne3fztmu6xc000000099g000000007zx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:22 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:22 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 8a3f5c5e-301e-000c-55dc-26323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161822Z-17c5cb586f626sn8grcgm1gf8000000006q000000000hsh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:22 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:22 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161822Z-15b8d89586fpccrmgpemqdqe58000000033g00000000f3eb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:22 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161823Z-16849878b7898p5f6vryaqvp58000000092g00000000hz4a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:23 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:23 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161823Z-16849878b78j5kdg3dndgqw0vg00000009x000000000rk6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:23 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:23 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:23 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161823Z-16849878b78fkwcjkpn19c5dsn000000077g00000000qtsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:23 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:23 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:23 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 34089ae0-601e-005c-0dae-2af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161823Z-r197bdfb6b4wbz6dd37axgrp9s0000000170000000002m18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:23 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:23 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:23 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 45a27b82-c01e-002b-5784-2a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161823Z-r197bdfb6b4xfp4mncra29rqkc00000001u00000000022vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:23 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:23 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:23 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161823Z-16849878b78wv88bk51myq5vxc00000008e000000000xdmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:24 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:24 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:24 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 69a14025-c01e-000b-6685-2ae255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161824Z-17c5cb586f672xmrz843mf85fn000000072g00000000gzhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:24 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:24 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:24 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c317859a-501e-00a3-19db-27c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161824Z-r197bdfb6b4wmcgqdschtyp7yg00000008e000000000075t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:24 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:24 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:24 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 2953fb54-101e-0028-3f94-298f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161824Z-17c5cb586f6wnfhvhw6gvetfh400000007q000000000gbc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:24 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:24 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:24 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161824Z-16849878b78qf2gleqhwczd21s00000008f000000000furu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:24 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:25 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:24 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: a349b1bc-a01e-0021-20bc-2a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161824Z-r197bdfb6b4wmcgqdschtyp7yg000000087000000000hs52 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:25 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:25 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:25 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:25 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161825Z-16849878b785jrf8dn0d2rczaw000000099g00000000ykvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:25 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:25 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:25 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161825Z-15b8d89586fbmg6qpd9yf8zhm00000000380000000007kpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:25 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:25 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:25 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 62681482-501e-0029-0976-2ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161825Z-15b8d89586fmhkw429ba5n22m800000009w00000000008va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:25 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:25 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:25 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 8f4dae4f-901e-008f-19cb-2767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161825Z-17c5cb586f6gkqkwd0x1ge8t0400000008yg000000002us7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:25 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:25 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:25 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: c3c23e01-401e-008c-4e94-2986c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161825Z-17c5cb586f6z6tq2xr35mhd5x000000000sg00000000r81d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:25 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:26 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:26 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161826Z-16849878b78smng4k6nq15r6s400000009qg00000000u7bh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:26 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:26 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:26 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 24b2bddd-501e-0016-07ca-2a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161826Z-16849878b78p8hrf1se7fucxk8000000094000000000hsyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:26 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:26 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:26 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161826Z-16849878b78g2m84h2v9sta290000000075000000000kcf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:26 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:26 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:26 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161826Z-17c5cb586f6sqz6f73fsew1zd800000001w000000000s10x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:26 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:26 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:26 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161826Z-16849878b787bfsh7zgp804my4000000070g00000000nh6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:26 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:27 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:27 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161827Z-16849878b786fl7gm2qg4r5y7000000008g000000000p6y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:27 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:27 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:27 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161827Z-16849878b78sx229w7g7at4nkg00000006m00000000047x8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:27 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:27 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:27 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161827Z-16849878b78tg5n42kspfr0x4800000008cg0000000000ag x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:27 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:27 UTC	538	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7be90567-f01e-00aa-3367-2a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161827Z-159b85dff8ftk4pxhC1DFWg5f000000000gg000000003uwn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:27 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:27 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 4f1f6d30-a01e-0070-1ae8-27573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161827Z-15b8d89586fvk4kmbg8pf84y88000000094000000000hnft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:28 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161828Z-16849878b782d4lwcu6h6gmxnw000000081g000000000gn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:28 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161828Z-16849878b785jrf8dn0d2rczaw000000099g00000000ym2e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:28 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:28 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ef425c1b-901e-002a-63e7-277a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161828Z-17c5cb586f626sn8grcgm1gf8000000006u000000000735v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:28 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:28 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:28 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 6796a20d-a01e-00ab-565f-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161828Z-17c5cb586f64v7xsc2ahm8gsgw000000036g00000000h9ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:28 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:28 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:28 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161828Z-16849878b786lft2mu9uftf3y400000009f000000000qu9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:29 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:29 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161829Z-16849878b78z2wx67pvzz63kdg00000006vg00000000h8g8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:29 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:29 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:29 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161829Z-16849878b78km6fmmkbenhx76n00000007p000000000a7c3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:29 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:29 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:29 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161829Z-17c5cb586f6sqz6f73fsew1zd80000000220000000005uvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:29 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:29 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161829Z-r197bdfb6b4grkz4xgvkar0zcs00000007w000000000g7tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:29 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161829Z-15b8d89586fzcfbd8we4bvhqds000000036g00000000admz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:30 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ff0e8b8f-401e-008c-1c9c-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161830Z-17c5cb586f626sn8grcgm1gf8000000006t000000000983b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:30 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:30 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:30 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f493011a-501e-008f-5f2c-289054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161830Z-15b8d89586f4zwgbgswvrvz4vs00000009hg00000000hxm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:30 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:30 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161830Z-16849878b78qg9mlz11wgn0wcc00000007yg000000000zqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:30 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:30 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161830Z-17c5cb586f6gkqkwd0x1ge8t0400000008t000000000c2ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:30 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:30 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161830Z-16849878b785jrf8dn0d2rczaw00000009cg00000000mhda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:30 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:31 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:31 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161831Z-16849878b78p8hrf1se7fucxk8000000095000000000cfct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:31 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161831Z-16849878b78x6gn56mgecg60qc0000000a0000000000tehw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:31 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161831Z-16849878b78p49s6zkwt11bbkn00000007tg00000000zkxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:31 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:31 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161831Z-16849878b787bfsh7zgp804my4000000070g00000000nhnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:31 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:31 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:31 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161831Z-16849878b78fssff8btnns3b1400000008f000000000u4nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:31 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:32 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161832Z-16849878b785jrf8dn0d2rczaw00000009gg00000000322m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:32 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:32 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:32 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:32 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 35f8d799-001e-0079-2cb8-2a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161832Z-r197bdfb6b4wbz6dd37axgrp9s000000016g000000004uxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:32 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:32 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:32 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: e75e1641-801e-00a3-2ec8-277cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161832Z-r197bdfb6b4xfp4mncra29rqkc00000001tg000000003yvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:32 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:32 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:32 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: cc0127df-201e-0003-7bc7-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161832Z-17c5cb586f66g7mvgrudxte954000000034000000000t6h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:32 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:32 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:32 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 09556753-901e-0064-11fd-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161832Z-17c5cb586f626sn8grcgm1gf8000000006w00000000003yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:32 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-17c5cb586f6wnfhvhw6gvetfh400000007rg00000000ccdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:33 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-16849878b78tg5n42kspfr0x4800000008ag000000009b7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:33 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-16849878b78x6gn56mgecg60qc0000000a4g000000006e7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:33 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a86168e1-701e-0097-7f6b-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-r197bdfb6b4qbfppwgs4nqza8000000006x000000000bgc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:33 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-15b8d89586flzzksdx5d6q7g1000000003f0000000005mg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:18:33 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: d36ad09b-701e-0098-4cde-2a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-17c5cb586f6zcqf8r7the4ske000000000q000000000399n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161833Z-16849878b78qf2gleqhwczd21s00000008k0000000001rqd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:33 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:34 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 626021c1-201e-0085-10af-2a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161834Z-17c5cb586f6z6tq2xr35mhd5x000000000sg00000000r8gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:34 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	545	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:34 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e4f189f6-d01e-005a-18af-2a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161834Z-159b85dff8fq4v8mhC1DFW70kw00000000e00000000043r4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:34 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:34 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161834Z-16849878b78qwx7pmw9x5fub1c00000006fg000000004hxb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:34 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:34 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: ef1abc9b-501e-0029-5887-28d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161834Z-15b8d89586fmhjx6a8nf3qm53c000000022000000000gvpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:34 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161834Z-16849878b78km6fmmkbenhx76n00000007p000000000a7va x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:34 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: eab3762f-c01e-0014-292f-28a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161834Z-r197bdfb6b4grkz4xgvkar0zcs0000000800000000008at5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:35 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:35 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 3a84bf68-701e-0053-4f6d-293a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161835Z-r197bdfb6b46kmj4701qkq602400000007gg000000005wb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:35 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:35 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:35 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161835Z-16849878b78z2wx67pvzz63kdg00000006y0000000007feb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:35 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:35 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:35 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161835Z-16849878b7867ttgfbpnfxt44s000000085g00000000a3kt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:35 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:35 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:35 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161835Z-16849878b786lft2mu9uftf3y400000009mg0000000031sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:35 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:35 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:35 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: ff90b716-801e-0067-48e5-27fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161835Z-17c5cb586f6z6tq2xr35mhd5x000000000v000000000dtvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:35 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:36 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:36 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: f75da22b-f01e-0085-0130-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161836Z-15b8d89586f8nxpt6ys645x5v000000009hg000000009f9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:36 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:18:36 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:18:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:18:36 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161836Z-16849878b78qwx7pmw9x5fub1c00000006a000000000vuxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:18:36 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Target ID:	4
Start time:	12:17:56
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	12:17:58
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1688,i,18115914345492491375,6791516678454002641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	12:18:02
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mandrillapp.com/track/click/30927070/cas.campaignagent.com.au?p=eyJzIjoiVlRwOUJ4TFJObEtnaWdoeEEyTDA0NlV5b19jIiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Nhcy5jYW1wYWlnbmFnZW50LmNvbS5hdVxcXC9zdGF0ZW1lbnRcXFwvQ1BOLTkzMTU0MzdcXFwvcGRmXFxcL2ZhNzE4MTk5LTIxNDAtNDY0MS04MDg2LWIyMTcwMDQzOTVhMT9zLXRva2VuPVdneGpZbiUyQmZKRE5qUnZNbklrVXYyc1NlcUFXWkdBUDdoUWU0VVBzYXN5cyUzRFwiLFwiaWRcIjpcImY1ZTkwOTBjYTI4YjQxZjU5ZjVlNmFmZjcyZmQ1MzgwXCIsXCJ1cmxfaWRzXCI6W1wiODZjNDc4ZDA5ZDAxNjZiM2ZlM2FlZjM5Y2EyNjU5Y2JkNmY2NzZmN1wiXX0ifQ"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:53:37
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\CampaignStatementCPN-9315437ByCampaignAgent.pdf"
Imagebase:	0x7ff702560000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	13:53:38
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6c3ff0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	13:53:39
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1620,i,10596925692712065524,11621686264154264479,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6c3ff0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\783b1488-b0e5-43cc-8bc0-b5af4df9d8b9.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7d45c0a7-e938-4c15-9e60-6701ecacc148.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF59e974.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241030175345Z-231.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

C:\Users\user\AppData\Local\Temp\MSI9b14d.LOG

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 13-53-41-267.log

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

C:\Users\user\AppData\Local\Temp\acrocef_low\2fe53555-8a45-4f78-b6d6-689a03bf606d.tmp

C:\Users\user\AppData\Local\Temp\acrocef_low\6f55c010-f5cf-4b5e-a2e6-5c17383aa54a.tmp