Edit tour

Windows Analysis Report
pCUif26EC3.pdf

Overview

General Information

Sample name:	pCUif26EC3.pdf renamed because original name is a hash value
Original sample name:	0cd4dbd246ef2e1e157f899c52ebc409a157507722ada5222da53883b135e928.pdf
Analysis ID:	1546402
MD5:	9f759680ce84091d375003eb701dc8e6
SHA1:	1d24d53ea038a720911f467f7a8c38756cc55902
SHA256:	0cd4dbd246ef2e1e157f899c52ebc409a157507722ada5222da53883b135e928
Tags:	pdfuser-KnownStormChaser
Infos:

Errors Corrupt sample or wrongly selected analyzer.

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected landing page (webpage, office document or email)

Detected non-DNS traffic on DNS port

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 4436 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\pCUif26EC3.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6632 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7260 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1644,i,9350794974525276448,17629122597262964351,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=INDIAN%20Armed%20Forces%20And%20Agencies%20Report&charset=UTF-8" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2660 --field-trial-handle=2516,i,3251236118383752928,15854534322080960164,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T21:07:19.552597+0100	2022930	1	A Network Trojan was detected	52.149.20.212	443	192.168.2.5	49719	TCP
2024-10-31T21:07:58.233311+0100	2022930	1	A Network Trojan was detected	4.175.87.197	443	192.168.2.5	50843	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: pCUif26EC3.pdf

ReversingLabs: Detection: 31%

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:50843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50919 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:50736 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 96.7.168.138 96.7.168.138

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 52.149.20.212:443 -> 192.168.2.5:49719
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.175.87.197:443 -> 192.168.2.5:50843

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lNzDyt+dmpdpar1&MD=RbVxNMDU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lNzDyt+dmpdpar1&MD=RbVxNMDU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: email.gov.in.indianarmy.pl
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: pCUif26EC3.pdf	String found in binary or memory: https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=INDIAN%20Armed%20Forces%2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 50909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 50829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 50899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50870
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50872
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 50888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50884
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50816
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50819
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50820
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50825
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50826
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50828
Source: unknown	Network traffic detected: HTTP traffic on port 50759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 50772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50832
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50831
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50835
Source: unknown	Network traffic detected: HTTP traffic on port 50907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50837
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50830
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 50794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50848
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50841
Source: unknown	Network traffic detected: HTTP traffic on port 50876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50840
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50898
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50896
Source: unknown	Network traffic detected: HTTP traffic on port 50745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50895
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 50792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 50874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 50895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 50779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50904
Source: unknown	Network traffic detected: HTTP traffic on port 50929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50903
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50906
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 50809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50907
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50914
Source: unknown	Network traffic detected: HTTP traffic on port 50833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50917
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50916
Source: unknown	Network traffic detected: HTTP traffic on port 50880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50919

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:50843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50919 version: TLS 1.2

Source: classification engine

Classification label: mal52.winPDF@47/51@7/6

Source: pCUif26EC3.pdf	Initial sample: https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=indian%20armed%20forces%20and%20agencies%20report&charset=utf-8
Source: pCUif26EC3.pdf	Initial sample: https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=INDIAN%20Armed%20Forces%20And%20Agencies%20Report&charset=UTF-8

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6048

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-31 16-07-07-014.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: pCUif26EC3.pdf

ReversingLabs: Detection: 31%

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\pCUif26EC3.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1644,i,9350794974525276448,17629122597262964351,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=INDIAN%20Armed%20Forces%20And%20Agencies%20Report&charset=UTF-8"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2660 --field-trial-handle=2516,i,3251236118383752928,15854534322080960164,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1644,i,9350794974525276448,17629122597262964351,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2660 --field-trial-handle=2516,i,3251236118383752928,15854534322080960164,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: pCUif26EC3.pdf	Initial sample: PDF keyword /JS count = 0
Source: pCUif26EC3.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: pCUif26EC3.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: PDF document	LLM: Page contains button: 'View Document' Source: 'PDF document'
Source: PDF document	LLM: PDF document contains prominent button: 'view document'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
pCUif26EC3.pdf	32%	ReversingLabs	Document-PDF.Trojan.Heuristic

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://x1.i.lencr.org/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	142.250.181.228	true	false	unknown
email.gov.in.indianarmy.pl	93.157.106.19	true	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false	URL Reputation: safe	unknown
https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=INDIAN%20Armed%20Forces%2	pCUif26EC3.pdf	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
93.157.106.19	email.gov.in.indianarmy.pl	Russian Federation	34360	OGICOMPL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
96.7.168.138	unknown	United States	262589	INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546402
Start date and time:	2024-10-31 21:06:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	pCUif26EC3.pdf renamed because original name is a hash value
Original Sample Name:	0cd4dbd246ef2e1e157f899c52ebc409a157507722ada5222da53883b135e928.pdf
Detection:	MAL
Classification:	mal52.winPDF@47/51@7/6
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document URL browsing timeout or error Close Viewer

Errors

Corrupt sample or wrongly selected analyzer.

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 52.5.13.197, 23.22.254.206, 52.202.204.11, 54.227.187.23, 172.64.41.3, 162.159.61.3, 2.23.197.184, 199.232.210.172, 2.19.126.143, 2.19.126.149, 192.229.221.95, 142.250.184.195, 108.177.15.84, 142.250.185.174, 34.104.35.123, 142.250.186.74, 142.250.185.106, 142.250.185.170, 142.250.186.106, 142.250.185.234, 142.250.186.170, 142.250.181.234, 142.250.185.138, 142.250.184.234, 142.250.186.138, 172.217.18.10, 142.250.186.42, 172.217.16.202, 142.250.184.202, 216.58.206.42, 142.250.185.202, 142.250.186.35, 142.250.185.67, 142.250.186.78
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: pCUif26EC3.pdf

Simulations

Behavior and APIs

Time	Type	Description
16:07:18	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://bafybeiddvo3il63heagouckt2pt3cr4xxiogr3tuansgqgmot65ahjsfma.ipfs.dweb.link/#sean@virtualintelligencebriefing.com	Get hash	malicious	HTMLPhisher	Browse
	DOCUMENTS.msg	Get hash	malicious	HTMLPhisher	Browse
	oZ7nac01Em.exe	Get hash	malicious	Stealc, Vidar	Browse
	Proposal From Wachler & Associates PC.pdf	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	http://amtso.eicar.org/PotentiallyUnwanted.exe	Get hash	malicious	Unknown	Browse
	http://amtso.eicar.org/PotentiallyUnwanted.exe	Get hash	malicious	Unknown	Browse
	El9HaBFrFM.exe	Get hash	malicious	Blank Grabber	Browse
	https://www.miroslavska.com/pvt/language-prefs?return_url=https:///alrbanyon.com/..&lng=en&return_url=/plain-flange_red.thick./dn-800/glatter-flansch-dn-800:813x20-pn-10-id-8195-mm	Get hash	malicious	HTMLPhisher	Browse
	original.eml	Get hash	malicious	Mamba2FA	Browse
96.7.168.138	Proposal From SIOLI Alexander Pino#U2026.pdf	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	401K .pdf	Get hash	malicious	HTMLPhisher	Browse
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse
	Oakville_Service_Update_d76b33a1-3420-40be-babd-e82e253ad25c.pdf	Get hash	malicious	HTMLPhisher	Browse
	2025+Policies_645622_929-5.pdf	Get hash	malicious	Unknown	Browse
	https://dl.dropboxusercontent.com/scl/fi/95is2w1ywjvorzayt88dp/DKM-0192PDF.zip?rlkey=svoej4s4tb5lwbnvthtgrmokl&st=d99zdn1k&dl=0	Get hash	malicious	Abobus Obfuscator	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	Sars Urgent Notice.pdf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bg.microsoft.map.fastly.net	https://usps.com-trackrsm.top/l	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://t.ly/4Nq2x	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	199.232.214.172
	Metro Plastics Technologies.pdf	Get hash	malicious	Unknown	Browse	199.232.210.172
	QUOTATION#09678.exe	Get hash	malicious	RedLine	Browse	199.232.210.172
	https://hidrive.ionos.com/lnk/FamigcCEF	Get hash	malicious	Unknown	Browse	199.232.214.172
	http://djaahaf.r.af.d.sendibt2.com	Get hash	malicious	Unknown	Browse	199.232.214.172
	http://www.kristinsacademy.com/?wptouch_switch=desktop&redirect=http://lagunaua.com	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172
	Invoice Ref ++_Donuts.html	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://0nline1.logs-trading.site/?O462BZ3P81OgZBK	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	Uschamber-TimeSheet Reports.pdf	Get hash	malicious	Unknown	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
OGICOMPL	a-r.m-4.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	x-3.2-.GHOUL.elf	Get hash	malicious	Mirai, Gafgyt	Browse	93.157.106.238
	x-8.6-.GHOUL.elf	Get hash	malicious	Mirai, Gafgyt	Browse	93.157.106.238
	a-r.m-6.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	a-r.m-7.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	a-r.m-5.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	i-5.8-6.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	m-i.p-s.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	s-h.4-.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
	m-6.8-k.GHOUL.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.157.106.238
INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR	Proposal From SIOLI Alexander Pino#U2026.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	96.7.168.138
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	96.7.168.138
	401K .pdf	Get hash	malicious	HTMLPhisher	Browse	96.7.168.138
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138
	Oakville_Service_Update_d76b33a1-3420-40be-babd-e82e253ad25c.pdf	Get hash	malicious	HTMLPhisher	Browse	96.7.168.138
	2025+Policies_645622_929-5.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138
	https://dl.dropboxusercontent.com/scl/fi/95is2w1ywjvorzayt88dp/DKM-0192PDF.zip?rlkey=svoej4s4tb5lwbnvthtgrmokl&st=d99zdn1k&dl=0	Get hash	malicious	Abobus Obfuscator	Browse	96.7.168.138
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	96.7.168.138
	Sars Urgent Notice.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://bafybeiddvo3il63heagouckt2pt3cr4xxiogr3tuansgqgmot65ahjsfma.ipfs.dweb.link/#sean@virtualintelligencebriefing.com	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	DOCUMENTS.msg	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	oZ7nac01Em.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	http://amtso.eicar.org/PotentiallyUnwanted.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	http://amtso.eicar.org/PotentiallyUnwanted.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	El9HaBFrFM.exe	Get hash	malicious	Blank Grabber	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://www.miroslavska.com/pvt/language-prefs?return_url=https:///alrbanyon.com/..&lng=en&return_url=/plain-flange_red.thick./dn-800/glatter-flansch-dn-800:813x20-pn-10-id-8195-mm	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	SecuriteInfo.com.Win32.MalwareX-gen.14673.11544.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://0nmdby.data--8.co.uk/oGRApYgs	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.205280484471687
Encrypted:	false
SSDEEP:	6:J5Cq2P92nKuAl9OmbnIFUt8oYXZmw+oYFkwO92nKuAl9OmbjLJ:zCv4HAahFUt8v/+95LHAaSJ
MD5:	3ED0B57A1708A7A4D720A59828A22644
SHA1:	F9C6A62DA2916C69FE31EEF502111261FA70EC1B
SHA-256:	E3D3ABA9C9C68CA63BC91B9AA5B37DD280907D2D53D6A2C0A797683EFA439409
SHA-512:	CAECF9574FC4A39B6EAB25DA261E13953D6BB233B07954AED88259C48AD8186FBD78917A947BA051B7A1C9F0B36443B03E407E447731E8F4BA756DFCDA8C5D3B
Malicious:	false
Reputation:	low
Preview:	2024/10/31-16:07:04.675 b04 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/31-16:07:04.678 b04 Recovering log #3.2024/10/31-16:07:04.678 b04 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.205280484471687
Encrypted:	false
SSDEEP:	6:J5Cq2P92nKuAl9OmbnIFUt8oYXZmw+oYFkwO92nKuAl9OmbjLJ:zCv4HAahFUt8v/+95LHAaSJ
MD5:	3ED0B57A1708A7A4D720A59828A22644
SHA1:	F9C6A62DA2916C69FE31EEF502111261FA70EC1B
SHA-256:	E3D3ABA9C9C68CA63BC91B9AA5B37DD280907D2D53D6A2C0A797683EFA439409
SHA-512:	CAECF9574FC4A39B6EAB25DA261E13953D6BB233B07954AED88259C48AD8186FBD78917A947BA051B7A1C9F0B36443B03E407E447731E8F4BA756DFCDA8C5D3B
Malicious:	false
Reputation:	low
Preview:	2024/10/31-16:07:04.675 b04 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/31-16:07:04.678 b04 Recovering log #3.2024/10/31-16:07:04.678 b04 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.180842877432004
Encrypted:	false
SSDEEP:	6:JnFIq2P92nKuAl9Ombzo2jMGIFUt8oDZZmw+oDzkwO92nKuAl9Ombzo2jMmLJ:hFIv4HAa8uFUt8kZ/+kz5LHAa8RJ
MD5:	0B818A8D2C99BFE134518464B8C3D301
SHA1:	43049EDF086F91FE1B2505706CA5836C71D82459
SHA-256:	F160DB274B9F1A822222164BB426411AD6120A58F6EB92054762D76136D44DB1
SHA-512:	D2A530D987F083AAF6433624A3416C2FD877E14DBDCCBE32DFFAB9C72C69B583BC1774D9FB373BE67842D3387BDCA2E249234FF6555243F8F35729407D489809
Malicious:	false
Reputation:	low
Preview:	2024/10/31-16:07:04.751 1c90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/31-16:07:04.753 1c90 Recovering log #3.2024/10/31-16:07:04.753 1c90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.180842877432004
Encrypted:	false
SSDEEP:	6:JnFIq2P92nKuAl9Ombzo2jMGIFUt8oDZZmw+oDzkwO92nKuAl9Ombzo2jMmLJ:hFIv4HAa8uFUt8kZ/+kz5LHAa8RJ
MD5:	0B818A8D2C99BFE134518464B8C3D301
SHA1:	43049EDF086F91FE1B2505706CA5836C71D82459
SHA-256:	F160DB274B9F1A822222164BB426411AD6120A58F6EB92054762D76136D44DB1
SHA-512:	D2A530D987F083AAF6433624A3416C2FD877E14DBDCCBE32DFFAB9C72C69B583BC1774D9FB373BE67842D3387BDCA2E249234FF6555243F8F35729407D489809
Malicious:	false
Reputation:	low
Preview:	2024/10/31-16:07:04.751 1c90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/31-16:07:04.753 1c90 Recovering log #3.2024/10/31-16:07:04.753 1c90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\567f19b0-b8cf-4a3d-a25a-5e54493acfff.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	508
Entropy (8bit):	5.063367813946807
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqsSsBdOg2HOgcaq3QYiubxnP7E4T3OF+:Y2sRdsHdMHu3QYhbxP7nbI+
MD5:	DA0E375D7C96F890C1085C47EE956CD2
SHA1:	528C7463BF7D788FAE44AC3559327EE086C8C4C5
SHA-256:	7AA22E67FEA38F481F19D4E274907632C312BB5841940492ECF72DFF376FE678
SHA-512:	29C3721E5440DECF2E95BD46AF4F99988E827C40BD0614F0C6B0078E6C6ED3DA1D5E7F632A51D02A7D9E90B8F9B96EE05B8AEE921A25679F8BCC1BD8355D5B95
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374965237156490","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":381049},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.063367813946807
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqsSsBdOg2HOgcaq3QYiubxnP7E4T3OF+:Y2sRdsHdMHu3QYhbxP7nbI+
MD5:	DA0E375D7C96F890C1085C47EE956CD2
SHA1:	528C7463BF7D788FAE44AC3559327EE086C8C4C5
SHA-256:	7AA22E67FEA38F481F19D4E274907632C312BB5841940492ECF72DFF376FE678
SHA-512:	29C3721E5440DECF2E95BD46AF4F99988E827C40BD0614F0C6B0078E6C6ED3DA1D5E7F632A51D02A7D9E90B8F9B96EE05B8AEE921A25679F8BCC1BD8355D5B95
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374965237156490","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":381049},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.235842189393698
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLUhghPHz9UhRZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLy
MD5:	04C7A7986A5E0C09C59D78C8C1EAD7B8
SHA1:	9B68AD5F25FF56D30D59A8156DD1BB34308C8F3B
SHA-256:	E739D07B00980B9BF03AA651BE52225D5387918C6364660C83959B6C29D7D7D2
SHA-512:	FDD497D3F5369250E3150F3C09F4E82FCE7F389DF5234857C28182DFFD5B05656D7E45E01761C5A4CA872955720673D98AD4B02535F295789310728468E5781D
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.196047963573296
Encrypted:	false
SSDEEP:	6:MIq2P92nKuAl9OmbzNMxIFUt8XUtZmw+zkzkwO92nKuAl9OmbzNMFLJ:MIv4HAa8jFUt8o/+E5LHAa84J
MD5:	63A6B46B08A4785DF2312296FC29FECF
SHA1:	B70017AEBB08733BB6989337CCE26C47BAF12819
SHA-256:	42C6A2EEE2D3DB8DCF817FA2D0C2DFB931F6C181883338F28C8757D4FD18DC32
SHA-512:	B01D2CE9BB2ECF863EA075162D5776D52D517D441682AF9546D1AAFAC42E5700A351FAFB8DABAA5FF12BD9F5F4EC99469C78DDE070AF7B00997B6244D72E95DA
Malicious:	false
Reputation:	low
Preview:	2024/10/31-16:07:05.223 1c90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/31-16:07:05.244 1c90 Recovering log #3.2024/10/31-16:07:05.248 1c90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.196047963573296
Encrypted:	false
SSDEEP:	6:MIq2P92nKuAl9OmbzNMxIFUt8XUtZmw+zkzkwO92nKuAl9OmbzNMFLJ:MIv4HAa8jFUt8o/+E5LHAa84J
MD5:	63A6B46B08A4785DF2312296FC29FECF
SHA1:	B70017AEBB08733BB6989337CCE26C47BAF12819
SHA-256:	42C6A2EEE2D3DB8DCF817FA2D0C2DFB931F6C181883338F28C8757D4FD18DC32
SHA-512:	B01D2CE9BB2ECF863EA075162D5776D52D517D441682AF9546D1AAFAC42E5700A351FAFB8DABAA5FF12BD9F5F4EC99469C78DDE070AF7B00997B6244D72E95DA
Malicious:	false
Preview:	2024/10/31-16:07:05.223 1c90 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/31-16:07:05.244 1c90 Recovering log #3.2024/10/31-16:07:05.248 1c90 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241031200708Z-153.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 164 x -115 x 32, cbSize 75494, bits offset 54
Category:	dropped
Size (bytes):	75494
Entropy (8bit):	2.5917433470517697
Encrypted:	false
SSDEEP:	1536:sf1b080nclcK9/PSn6oYyAoXZKkYuP65+looooo8sofboJj:8btEmaTvYV5d
MD5:	E2D2995230934DB29251785D911188C1
SHA1:	179C9FA7156E12A688D1542013AC1DE0D8C0C50B
SHA-256:	1D01C771840BE476B6DF55F378C3FFABD3F46327D57D1A2CA5515529EEA883F5
SHA-512:	4346D26642DBBEFF99C1B474AC4DCF1AF9E677CB228765595B936E2A09CCDE95AB517886B58A02170BFB20BB5D16F54681B1C265F889052EDEE6F204019AD738
Malicious:	false
Preview:	BM.&......6...(............. ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7381013623686155
Encrypted:	false
SSDEEP:	3:kkFklFgWREvfllXlE/HT8k5BlhlltNNX8RolJuRdxLlGB9lQRYwpDdt:kKRWR9T8wTRNMa8RdWBwRd
MD5:	5AE6B8787376538B9BFD7FE2771656C3
SHA1:	F86FB3F367BED0D655EF89FB7CAB8E4FC9A1C5BD
SHA-256:	0D96C7B5BE2B22A2D9618638A948590CFCA17A0769D992237DAF271E14C202F8
SHA-512:	494B4AC10DD083FE2E1403A57F270D627A08238256F1EA58B97B275B9D532C6CF719359F5566D7473D73653669DB9CDA6BB1C73577C5F2F7A50564B2E4E671E0
Malicious:	false
Preview:	p...... ........6..\|.+..(....................................................... ..........W.....~..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2455963809668176
Encrypted:	false
SSDEEP:	6:kKV39UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:MDImsLNkPlE99SNxAhUe/3
MD5:	6A3B3BDBDD70C489C3FBB9FA8C3BEF2F
SHA1:	C17C820F525DA17C335C954DBF09F76B26CEA802
SHA-256:	41545B8EB9939704EE1AE8D4701204D875C94146E22C1819FFEF079A76B38E02
SHA-512:	140F2E4CC8D41A250D4DF8E855EAF223046E95BC698BA3C59A6CB43C9854B2D7FAD9C4C7569D0CAA47F829EAA409740DF69B4A9E6C4A6051987FDAD6F387C823
Malicious:	false
Preview:	p...... ..........:..+..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6048

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	228346
Entropy (8bit):	3.3890581331110528
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgf/rRoL+sn:DPCaJ/3AYvYwgXFoL+sn
MD5:	BAE090D23B1C0D4F6DC247F0080D349E
SHA1:	8A7AAD52A54F9A3CCEF3CE323F6BBD5B2B530461
SHA-256:	D7D3096317CF32DBEDF75D85390FE89A96170D44C09B2F6D164036064F506AE3
SHA-512:	208136EBA10544EA5EADA1C32EADFD8066047A9D851FF95BADF9938D40AFA1771003C2725DB8C78991E700C73FA2FC3C9F3CC3712B3332E4CF6F8DDE0E539130
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.345095726333751
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJM3g98kUwPeUkwRe9:YvXKX2Vw9WnUYpW7mGMbLUkee9
MD5:	700B301119889A5BB0CA2EBC03721A16
SHA1:	95E6450F097F3A34167989F6C4C46FA0ED501B65
SHA-256:	DC733D950436E032A64D287337103B68A3D73855779422F763E1410FF8E6E7C9
SHA-512:	FD99C36A7910B0867E8BA6222E549E06AC9D260E15974406E436A9ABED74BDA4D62A94D06BE2803C2622F706FCAD32F6603AAF64AACF012532F828C6C504C284
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.284566685273751
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfBoTfXpnrPeUkwRe9:YvXKX2Vw9WnUYpW7mGWTfXcUkee9
MD5:	58817B3AF92041083B441BB39C0BD30F
SHA1:	57A32D993DEF58965DFB2E4A4C37762BC5D5D36F
SHA-256:	2D0EECEE6282EA7F118DF7866A33C3D95E46025E553EE5352A172DD8D1BF24BA
SHA-512:	6EA498F9110C8CDBDC8ACDE447F096203E76B254D8E0D48D6E871B29886587B485ADEBCA361E8C6E69DF097EA98A49279C62FD8519D168FBEAAD0BA382BA6CD3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.263764433242955
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfBD2G6UpnrPeUkwRe9:YvXKX2Vw9WnUYpW7mGR22cUkee9
MD5:	7CE628C5D3F5DE11D47E6A30781BF534
SHA1:	331969692DFA7E53C138C040A57C9F7FBE72A403
SHA-256:	001590DFC598CC81F5EEAC163C7AADF4B4A407DDE94664F5F09F2C03BE48F979
SHA-512:	DCF8ADAC1F725475BD38AEA99488A4EFC93469F31EA3AFE3E8EF74C2B63382D1D3C3420B4535459BF67B8906559875252C354880ED292052F7338132BF1DF602
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.323347633461952
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfPmwrPeUkwRe9:YvXKX2Vw9WnUYpW7mGH56Ukee9
MD5:	0334EB0102FD607899974EDBCAA936F7
SHA1:	9985A3BF65F35DFC27A917962EB43E911AFED82A
SHA-256:	F6E54E783FD38ED2E3FDF6937F80ABD0B049B1948AA8DE79C4748D145389FC93
SHA-512:	28A692A85B3D49113AB4E6B6D9ADE5504674509C8E384291FE562A6C94ACF77B1318BBBE5BC25F02C7E026D9DE2BB057CA07245DAB230915D43D26BD8A7E37EB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	5.657757395070209
Encrypted:	false
SSDEEP:	24:Yv6X2ViWnFizpLgEscLf7nnl0RCmK8czOCCSM:YvVAxzhgGzaAh8cv/M
MD5:	F7FA3809EFFFD18D9303BD0CECA7D8B4
SHA1:	74064F28A154522CB43DC4421B7D0F6755F1607D
SHA-256:	15E1012BD2277B883EF1DDC6F59D24CB6CF9B1E70E370160BEAF215206DC8D34
SHA-512:	1807F36A295C768ED4F4E61C02439667C0FE7FE83BA1C5E91F6E82A8468EB6C3A30F315BD3C0729D7EB1052F5EA93816B67AD339ECF68E434D534F8B2A5E7D62
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_1","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"eb1a4bce-8215-46f1-b44c-154b21a85d60","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingScheme":tr

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.652268230608559
Encrypted:	false
SSDEEP:	24:Yv6X2ViWnFivVLgEF0c7sbnl0RCmK8czOCYHflEpwiVN:YvVAxvFg6sGAh8cvYHWpwM
MD5:	51BD0919DED9F5D8399DBA75F9835181
SHA1:	E5D5F42CC058CAC75B3361FA92807527C7C2ABF8
SHA-256:	EBB13FFB240332123B45EAFC4A74C0A7BB8AB874B6A2469A1F6A7780542D4FB6
SHA-512:	88BE4F643D7D27F36E8878D1E2CEEB3A9D9C58D3B041DE9CD4EC93601B8EED2B05A48693038C1823E650F102F867E12C801BA3DBC6361A3B9884DC981A022DCB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.271559890394027
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfQ1rPeUkwRe9:YvXKX2Vw9WnUYpW7mGY16Ukee9
MD5:	9FEDC9BF89BD0F37DEDEE8CE74EE410D
SHA1:	D491408F0D176453A95320006711E42322B29649
SHA-256:	54052954953F135D364BA48CF08D019E2BDFF85DE6352AA24692885F69BEE7AB
SHA-512:	A82B46EC594389252A9469512287C8E747F339964D89EE03EFBD4BDF08D5ECCF1FEB0C63E082656ED70C581C4B324F534BD91E353A8C391A9A78A2407B16B9A5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.649306886489259
Encrypted:	false
SSDEEP:	24:Yv6X2ViWnFi+2LgEF7cciAXs0nl0RCmK8czOCAPtciBN:YvVAx+ogc8hAh8cvAf
MD5:	82430AF76DACC92104B1AD606177FF23
SHA1:	7517EBF06DF2B6BB2CD82F3FD6426520DFE7FF3B
SHA-256:	9CFA41C94ADCBD2EBA123AEA6BABA9AC05114EBB7527F893EB38D87D1AEB331E
SHA-512:	4493B4DB12806218F1F0AAE08A6041F78A2E55DC6277219264BBD0404166D75A042B1A5CEF636F7472DEC290A0F60BEE888D746672ECF61FE52FBC27990599D5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.6984610153603805
Encrypted:	false
SSDEEP:	24:Yv6X2ViWnFiyKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5N:YvVAxyEgqprtrS5OZjSlwTmAfSKj
MD5:	873F46ECF023BA4FE745FED81BDB7245
SHA1:	27685A87073744DB89D7935141BA164FA6C6079C
SHA-256:	5CF72B87ABADF8484B8A6DF2B39DBB8D1B062925DADE4952BECABA8DEFB60F57
SHA-512:	FE00738F96F3F3BE934A540ADECAFC3ECA4E6534EB463E52EC1E4D384C0DEDCBE788E59A9F5809D10693DCE13E64FC2EC3C02C530870EACF832125E6D14C390E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.277509684568648
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfYdPeUkwRe9:YvXKX2Vw9WnUYpW7mGg8Ukee9
MD5:	CB464A912A2FB1E686EDA50C1EB1E094
SHA1:	040472C71F775E02385164AA171E164FDA4868D3
SHA-256:	1DC5B9307495DDCE3EC1DC9230192842C65F53FA937FEFF40833C0515E3B595C
SHA-512:	A704112EDC32D53A08A27654AA949AABF9C52903725CEC29F559DC399270F0AA4849B05100B6B7314374ADD4C1993E33DAD43A171320877227FF0C6A4B2C8AD7
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.77134613343333
Encrypted:	false
SSDEEP:	24:Yv6X2ViWnFixrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNF:YvVAxxHgDv3W2aYQfgB5OUupHrQ9FJj
MD5:	508DFFBEB5EB643EC8066778A94ED2B7
SHA1:	C5510BD5002AEF14F1C7C58F970FB590C814C6B2
SHA-256:	7D0260A7E36EA8305E921C67E0863E46A3C2390CFDF47476B2F8F068450958D6
SHA-512:	49BAE204137914597B73089F8A3AD61F8BD1522196658817B3CA1E547708EBC08B94A0E1A5CD18449F3864A809959FC70281B465672F5AFE9CF5D3407954D92C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.26121135485716
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfbPtdPeUkwRe9:YvXKX2Vw9WnUYpW7mGDV8Ukee9
MD5:	17322C6F5E81A65B5A5B2954B7E01AF1
SHA1:	76CA1993E5736B72A0C6BD2154ECDE386D09AC78
SHA-256:	DCCDB23E4D062845C976C839D75AE9171063DA1D7F67DAEAC424ABE0BB802F54
SHA-512:	A8AF18AF62894FB78A8BD7AF9F219611A7ED4BC936A236B63053745601E34AE785100B3A65920D9D87F02CD5CDF1D956BEF112270C46355D4E5850869C2A62E4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.262258893977972
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJf21rPeUkwRe9:YvXKX2Vw9WnUYpW7mG+16Ukee9
MD5:	D730BBFC4615266CECB21EE51B4579DB
SHA1:	21771F20448F5C95DA750001C825FF6BE88A9566
SHA-256:	D55CE3B5544C50193C9331B13251FE4C4BEEC700B91F156A97F212A62DDD110F
SHA-512:	DD26E1302A322372837A800875087B77ACC7575AC722A4161C4F699CEC3B39AC6AD8637DC41EE202841495C0A45B97A4DB89C36542A50E33E4DCB8F11B2276DC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	5.62710603732519
Encrypted:	false
SSDEEP:	24:Yv6X2ViWnFiDamXayLgE7cMCBNaqnl0RCmK8czOC/BSM:YvVAxzBgACBOAh8cvMM
MD5:	F7CDBD28140E3195081D317F19510B08
SHA1:	E3F7E1F1DEDACC24E3CC476C4917B97A9A270A45
SHA-256:	5B8669002240C157247259819A4FE687A970AF70A3A720DDC37712D11BE1A535
SHA-512:	E4CF8FDE62F90A3F5B178320E540E95653691536E905252392F968ED20622CD705D98403B5845D84B737D4191B2EEF9DD7FC8F1FBF53F2B2F2D239D1A0F09812
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_0","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"6291f52b-6cb0-4d31-bc46-37ce85e9eb25","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1751323379000,"s

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.236812408140834
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHWKEw9YZnx+FIbRI6XVW7+0YkoAvJfshHHrPeUkwRe9:YvXKX2Vw9WnUYpW7mGUUUkee9
MD5:	262DB28187C0F4EAE37DA989F2FA4458
SHA1:	2D276524076D7E7E40F699E8F14DDC1F2508CDD2
SHA-256:	E32C8DA3E739D63C8902AD0C07CAEE79B9C6363244566D7E66B044D54EF52EF6
SHA-512:	0E8FD9ADCB846A9953A0848BD9D11D291CB5B7F68AD0C6FA73F0D671C4740EAA41D12D8460A6018D72F34618E74E3C0B1BB2CFCFE6D2F3727A62E48D9E97D352
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.362557905454052
Encrypted:	false
SSDEEP:	12:YvXKX2Vw9WnUYpW7mGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWR:Yv6X2ViWnFiA168CgEXX5kcIfANhM
MD5:	EDBDAB21F50FC9FC73828945423448EF
SHA1:	FC560B7600C263E489DB43A0832A0DE3D9B85551
SHA-256:	692F25242EABC47896CF12DC714A9A41B259EB61700BB77645419F67D3AE94EB
SHA-512:	EEAE102B26B62162B87E098190091B663C2DC0E9453455B72F132CFE198C9AF10DF52BC94D4F2F6992259E5E77D7F13FCD92822D118962DBE893F61EDDD38876
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"03f3217f-e61b-428d-b328-2829f11b0da6","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730581780900,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1730405230937}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.134100767381036
Encrypted:	false
SSDEEP:	24:YujdTg3EXarz3ay/GRWd1AWSChQ6KFIEDK6m3hWM2kjOjyj0S43s/M2o2LSyev4F:YCdspadRaQf1m6BQgEYPdIev47F9d
MD5:	08C6513C7C1B65BC27CCFD2BD85702F6
SHA1:	66B673BF8D4E79BB98D79F6FB428999DB8A78A99
SHA-256:	C3AD0EE7609DA250A28F3C235182A1AD2B85DB268E5AF1CF4232B126BF24765D
SHA-512:	B50E4461ECF7BC957358B87DDD35D1A96D87D68F332F861C55C6A1E8D0F211D0E400F2FBF4452111CB8A61015DDE29548A2545F6DFF3ED9BDD4BDE99386A6606
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"847fd0f2aa254d7ebceed9c430f5dd38","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1730405230000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"3dad5e1a3e298c69ef7231521c478fe9","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1730405230000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"7452e36b2e02e3cac6ef7bac1a69b64e","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1026,"ts":1730405230000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"6e9b905217990b92d2bd61d84820bb7a","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1055,"ts":1730405230000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"1e937b778b3cf1698bb3bc501cf28a25","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1730405230000},{"id":"Edit_InApp_Aug2020","info":{"dg":"6ac148fd73d58e520132604c8388c3c2","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9839117255727323
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/Spz04zJwtNBwtNbRZ6bRZ4A0F:TVl2GL7ms6ggOVprzutYtp6Pe
MD5:	9012B34714B8A39AD33565EA978AF211
SHA1:	16B1D4411B241A89E81451232D0BDABAFD6A5DE7
SHA-256:	200D910CA0EF68553695F7081FDB2235C61912D1895EB4B41B00B80AC07AE69B
SHA-512:	3FA18B48991CCACB42B13F95CC4976F65DBAABFF16B84DBF6FC9175C83E540EDB1DEC2C07F06BBA2DA831F5BAD13CBA2A0E8BD392DCB8BC861855ED244442131
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3384910163358608
Encrypted:	false
SSDEEP:	24:7+tQAD1RZKHs/Ds/Spz0PzJwtNBwtNbRZ6bRZWf1RZKgpqLBx/XYKQvGJF7ursY:7MQGgOVpUzutYtp6PMxqll2GL7msY
MD5:	5529E12ECAC0CD13A57DACDE2FC859DF
SHA1:	6C10EC124B1DF3DE46AD2DDE7DF37B4099904AD0
SHA-256:	B28EE50CA51C7FA297BE4984DA6ED28798F100AE8C184EDE19D8D8790098C8AB
SHA-512:	D20E34CEDB8AFB4B0E2796ED2D2598740F57FA2738642F3DFA06E857554374EE066E9672D6F3F01635FD69C181D0C0F57F44E6A3A8E85E24623B7A4867F01867
Malicious:	false
Preview:	.... .c...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIfd2d2.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5085442896850614
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8fQRqrNe8H:Qw946cPbiOxDlbYnuRKuvNe8H
MD5:	165EB964574D80997563AE9F97D21D42
SHA1:	514AC487941C8EA1398D964338B71C980A84113D
SHA-256:	BA877ECCA4B98211AB04262A39A6CA32985EA068554279972E982A663D8694E6
SHA-512:	ED42BC2CBC7DF00F387FF05209B131C502705B5D2FB3E3D21E1CB2A280D68091A696975579C2EA126E6BD58E2BCE23802985FB9A23EFB5BB04820A93707B8BFD
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.1./.1.0./.2.0.2.4. . .1.6.:.0.7.:.1.2. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-31 16-07-07-014.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.303580505236138
Encrypted:	false
SSDEEP:	384:q13rZrorBrnrurpdr2ra0rZrprvrmEEEHE4aQncnubSbVbxbwbDbF7l9l9lb4/41:4JQP
MD5:	411975CAC702FAB04B9FF80A95BCE81D
SHA1:	1041DE1D629612F0026C08A0D8FF7E0419840754
SHA-256:	15F11CA9579A437FC085462CEF0FADBDEA453F91ABB77F7DBD0B31177DFF25D2
SHA-512:	6DBD30B97ABEC9484B73367E7B91FFB49368F0043CB2EA7E59562F9FCE76C30111E647A7E999119D722096E0A693CA0BD46B7795EFB64A94558D7E7701232EC7
Malicious:	false
Preview:	SessionID=ec30ec01-ba0a-432f-9c5b-796e4e1d0494.1730405227033 Timestamp=2024-10-31T16:07:07:033-0400 ThreadID=2992 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=ec30ec01-ba0a-432f-9c5b-796e4e1d0494.1730405227033 Timestamp=2024-10-31T16:07:07:035-0400 ThreadID=2992 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=ec30ec01-ba0a-432f-9c5b-796e4e1d0494.1730405227033 Timestamp=2024-10-31T16:07:07:035-0400 ThreadID=2992 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=ec30ec01-ba0a-432f-9c5b-796e4e1d0494.1730405227033 Timestamp=2024-10-31T16:07:07:035-0400 ThreadID=2992 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=ec30ec01-ba0a-432f-9c5b-796e4e1d0494.1730405227033 Timestamp=2024-10-31T16:07:07:035-0400 ThreadID=2992 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.393890048266534
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbx:9
MD5:	0EA60CA1117C74B1E6B925362E15294A
SHA1:	EE599F478D78FFE0102A162EE09CCC68928E0D71
SHA-256:	2190BA0D0592B841C0313D714035BCFEE82461E46862F117076B501EBC647891
SHA-512:	4F61EB1D37DF27F53DAC50EE3A660C43D5D0CF7AD9BB7DB46FBFFAEBFA756BAA7166BA9BCA2E21D75D69358B85356518DD276D16C6A1F527015EF95249330199
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\354887b1-72d1-4af1-8824-b20ac6c1c6b0.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\66e56cfd-6540-41a3-b9e2-13864bc450bf.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\8511d457-5e29-4d63-89bd-7a956a8e07ac.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/M7ouWLaGZjZwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:RuWLaGZjZwZGk3mlind9i4ufFXpAXkru
MD5:	AE1E8A5D3E7B2198980A0CA16DE5F3D3
SHA1:	A1DB2C58AFC81E6A114A8EB47BE0243956F79460
SHA-256:	8C2E1B13F6658714D51737D6745FE065B87497923945AB3028706A4171C8328F
SHA-512:	5B36CF0982C5AFED5CCEA4B30A0B31A2B5312FBF5438623D53153E076B59F1B4BEF8C08695EA74E086BCA4EF7221889DB977B5DCFF4C684BA0683FDDECDE2EC4
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\e3bcc4d6-6d11-41ec-a16f-01017c477ae4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:07:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9717120517701217
Encrypted:	false
SSDEEP:	48:86d2TyiSHoeidAKZdA19ehwiZUklqehvty+3:8HXYGy
MD5:	40DBD8BD5D108AEE48537F185C31BDEC
SHA1:	912ED46A6BDAB33655D3F20F5AEE99869156B315
SHA-256:	C9099EFFAE271520A39A051A01AA3855E086936630CE8CE69BEDADC2006EB3F7
SHA-512:	79B9455BDF99F1B6047AEFC661C83D61AAEB10962BC72B9A4BFB4527CAFDF2F146D696650E370B2C3E27A58E0ABB3069D7CCD2E19889532DC96D53E7313DC8BD
Malicious:	false
Preview:	L..................F.@.. ...$+.,....'0...+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I_Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D.=g.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:07:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.986693205589233
Encrypted:	false
SSDEEP:	48:8Kd2TyiSHoeidAKZdA1weh/iZUkAQkqehwty+2:8XXy9Qby
MD5:	461CA4DB509C37A4A1A588AD8B8255F4
SHA1:	1C4341AD7390AACEFCE958A33DE20E189734F35A
SHA-256:	DBCF3D414ABE54BA8CCCCCAFB69FAB5CE6F990F4ABAB777C16F3E90CA49027FF
SHA-512:	369A936B5823B87A30B3C4BCEE3438EB57E29470787967CAD93418D81BC417F457D2DC5CDBDB8F769BE5B29EDE97863DFC5A35C19DF21AF11EDF9F58B711D3A5
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....R...+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I_Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D.=g.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.99870604972935
Encrypted:	false
SSDEEP:	48:8xud2TyisHoeidAKZdA14tseh7sFiZUkmgqeh7s6ty+BX:8xLXonqy
MD5:	9BC8A4A3DAFDC9B5D29175E22040A099
SHA1:	EFC56AD9727D6F1B92DCB2CD7F245A1ACC8695EE
SHA-256:	8F0B7109A7B01A02DA8AD04A991EA4F7529F92DA12B8237CB3859E7EF736B39A
SHA-512:	0A5B2DD3FF0007CD744CB8BF8A62B16969FC83EDD9EB09D056B74EB1A81884F9C8F03A0BC960AC81624CA405BBDF505CCAAC6AFC6D711B68BA1D01AFACA2C2C2
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I_Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D.=g.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:07:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9850649325137626
Encrypted:	false
SSDEEP:	48:8bd2TyiSHoeidAKZdA1vehDiZUkwqeh8ty+R:8sXZ8y
MD5:	8CF4B886DE69A0F488F42118D5933143
SHA1:	5D1F63B64505C62550E326F0A0B2D5ABE661D928
SHA-256:	01BC7DE0C105C4034ACEA6831FFC19017ADC91ECA8C40167550DD16B629CB90E
SHA-512:	79FE4D1E70B4FAB7C5D31AFC8E8014D48600F6158233FCDCEF1ADB3F240F0A582432DC760059D8655FCB5ABA25E3BCCF2775EB90D8DEA3C6099229712AA79473
Malicious:	false
Preview:	L..................F.@.. ...$+.,........+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I_Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D.=g.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:07:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.972729998028878
Encrypted:	false
SSDEEP:	48:8Ad2TyiSHoeidAKZdA1hehBiZUk1W1qeh+ty+C:8NXp94y
MD5:	C0AD5CAA678DAF22321D54728E2B7AF1
SHA1:	900E1CAE0588893C1D48D03B63F2C3005022D7D4
SHA-256:	84CCE4CACA601274B706B38E40302B142367E8A345EBC1D8BA329C8B62BF82EB
SHA-512:	64A0862E1FFAFC41D223A276E8860ECAAFBDE28B0D695FB296D0EDB5A29263E02A7CA175508572E51F24834C95AAC6EC0AFB5205E391C32DE15F8D05CBCCE0AC
Malicious:	false
Preview:	L..................F.@.. ...$+.,....9c...+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I_Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D.=g.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 31 19:07:32 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9859743452615732
Encrypted:	false
SSDEEP:	48:89d2TyiSHoeidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUty+yT+:8mX1T/TbxWOvTbqy7T
MD5:	A49D5F9B608F9E4EBD3F93D409396C40
SHA1:	762B6A72C1910BA034A22AEA26043CC0CB2EA6DD
SHA-256:	8FC51A45EF8BEB0A0305F45343F33B2E9F38FADCC6B94D656CA87B62091FB558
SHA-512:	8FE15625BEA008EA89D98AA17AF50EB9F2ABE75E9835F13CD6EB1A26A4DF782461583DA43ACF14D11DA8566A15C3922A2D543DEAE99C299DDCD32B9377D6DA05
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I_Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D.=g.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Static File Info

General

File type:	PDF document, version 1.7, 1 pages
Entropy (8bit):	7.676089661624533
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	pCUif26EC3.pdf
File size:	71'430 bytes
MD5:	9f759680ce84091d375003eb701dc8e6
SHA1:	1d24d53ea038a720911f467f7a8c38756cc55902
SHA256:	0cd4dbd246ef2e1e157f899c52ebc409a157507722ada5222da53883b135e928
SHA512:	c0ce27f180fabe3bba13dd87cd877f9c676e385b89711d39ddf084181444fb9490a8cd02441f042ca12785fb8087ed4d1ad06e5ddd0938fac87068b668872e32
SSDEEP:	1536:gv0HOQyNnzLaPsYTfUXzrx06DTyQHFYwGm:qspyRLszUzr/DTp
TLSH:	A963F7078809DBC6916C86D47E031EDC6E172719D9866EEB302E9F9F3F206630CCA15E
File Content Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 12 0 R/MarkInfo<</Marked true>>/Metadata 26 0 R/ViewerPreferences 27 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 1/Kids[ 3 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/R

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.676090
Total Bytes:	71430
Stream Entropy:	7.677517
Stream Bytes:	68148
Entropy outside Streams:	5.403827
Bytes outside Streams:	3282
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	17
endobj	17
stream	6
endstream	6
xref	2
trailer	2
startxref	2
/Page	1
/Encrypt	0
/ObjStm	1
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
10	2b0f2f0b0f071317	dce9d524b411384af6f057b698ee9bfb

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T21:07:19.552597+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	52.149.20.212	443	192.168.2.5	49719	TCP
2024-10-31T21:07:58.233311+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.175.87.197	443	192.168.2.5	50843	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 21:07:07.074281931 CET	49675	443	192.168.2.5	23.1.237.91
Oct 31, 2024 21:07:07.074434042 CET	49674	443	192.168.2.5	23.1.237.91
Oct 31, 2024 21:07:07.169286966 CET	49673	443	192.168.2.5	23.1.237.91
Oct 31, 2024 21:07:09.789127111 CET	443	49703	23.1.237.91	192.168.2.5
Oct 31, 2024 21:07:09.789251089 CET	49703	443	192.168.2.5	23.1.237.91
Oct 31, 2024 21:07:11.576978922 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:11.576993942 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:11.577063084 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:11.580321074 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:11.580337048 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.443244934 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.443347931 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.477550030 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.477570057 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.477778912 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.528830051 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.714922905 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.759352922 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.962547064 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.962589979 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:12.962762117 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.962762117 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.962884903 CET	49714	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:12.962898016 CET	443	49714	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:13.004103899 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:13.004163980 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:13.004286051 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:13.004559994 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:13.004589081 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:13.866707087 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:13.866790056 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:13.868029118 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:13.868047953 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:13.868268013 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:13.869348049 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:13.915328979 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:14.121767044 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:14.121814013 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:14.121876955 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:14.122625113 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:14.122647047 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:14.122688055 CET	49715	443	192.168.2.5	184.28.90.27
Oct 31, 2024 21:07:14.122703075 CET	443	49715	184.28.90.27	192.168.2.5
Oct 31, 2024 21:07:17.474137068 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:17.474164963 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:17.478363037 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:17.478363037 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:17.478383064 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:17.481333017 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:17.481370926 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:17.481775999 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:17.481775999 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:17.481803894 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:17.623557091 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:17.623605013 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:17.624839067 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:17.624839067 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:17.624896049 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:18.240463018 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.240622997 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.242487907 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.242511988 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.242723942 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.250881910 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.295353889 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.508649111 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.508676052 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.508697987 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.508816957 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.508856058 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.508903980 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.526103020 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:18.526256084 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:18.527777910 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:18.527807951 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:18.528028965 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:18.569900036 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:18.631517887 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.631535053 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.631644964 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.631683111 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.631726027 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.752845049 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.752862930 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.752934933 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.752971888 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.753016949 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.875575066 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.875592947 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.875665903 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.875706911 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.875747919 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.997600079 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.997617006 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.997678995 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.997714996 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:18.997736931 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:18.997759104 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.119092941 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.119127035 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.119189024 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.119224072 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.119246960 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.119488001 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.240313053 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.240336895 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.240397930 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.240432024 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.240453959 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.240467072 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.251435041 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.299330950 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.352906942 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.353244066 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.353267908 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.354172945 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.354239941 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.356662035 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.356715918 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.356859922 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.356865883 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.360532999 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.360555887 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.360610962 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.360647917 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.360666990 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.360727072 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.363388062 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.363404989 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.363447905 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.363470078 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.363488913 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.363534927 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.397694111 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.485416889 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.485485077 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.485621929 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.485817909 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.485841990 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.485898018 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.485939026 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.485960007 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.485975027 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.486284971 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.486304998 CET	443	49716	96.7.168.138	192.168.2.5
Oct 31, 2024 21:07:19.486320019 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.486373901 CET	49716	443	192.168.2.5	96.7.168.138
Oct 31, 2024 21:07:19.551269054 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.551299095 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.551306963 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.551336050 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.551362038 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.551364899 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.551398039 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.551419020 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.551419020 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.551440954 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.552079916 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.552138090 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.552145958 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.552517891 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:19.552792072 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:19.606750011 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.606771946 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.606828928 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.606861115 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.606879950 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.607034922 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.725002050 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.725023985 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.725100994 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.725135088 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.725182056 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.767677069 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.767700911 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.767749071 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.767760038 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.767791033 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.767807961 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.846738100 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.846811056 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.846811056 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.846858978 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.846940994 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.846956968 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.846968889 CET	49717	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.846975088 CET	443	49717	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.900986910 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.901015997 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.901160955 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.902200937 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.902295113 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.902370930 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.903841019 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.903851032 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.903903008 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.905448914 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.905456066 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.905510902 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.906130075 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.906155109 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.906400919 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.906605959 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.906637907 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.906797886 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.906812906 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.906954050 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.906965971 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.907143116 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.907166958 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:19.907257080 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:19.907269955 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.229832888 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:20.229832888 CET	49719	443	192.168.2.5	52.149.20.212
Oct 31, 2024 21:07:20.229907036 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:20.229938030 CET	443	49719	52.149.20.212	192.168.2.5
Oct 31, 2024 21:07:20.635588884 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.636045933 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.636066914 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.638186932 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.638195992 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.649910927 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.650379896 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.650473118 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.651668072 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.651683092 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.667268991 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.667582989 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.667598009 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.667999983 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.668004990 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.677148104 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.677491903 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.677522898 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.677879095 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.677890062 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.774069071 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.774096012 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.774147034 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.774184942 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.774208069 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.774472952 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.774472952 CET	49727	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.774493933 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.774502993 CET	443	49727	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.777535915 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.777611971 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.777848959 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.777992964 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.778018951 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.781579018 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.781600952 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.781677008 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.781677961 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.781744003 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.781933069 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.781933069 CET	49726	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.781959057 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.782004118 CET	443	49726	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.784207106 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.784240961 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.784424067 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.784578085 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.784593105 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.801054001 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.801081896 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.801131010 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.801196098 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.801258087 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.801304102 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.801312923 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.801392078 CET	49728	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.801398039 CET	443	49728	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.803283930 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.803320885 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.803380966 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.803524017 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.803531885 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.821309090 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.821646929 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.821829081 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.821872950 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.821872950 CET	49729	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.821894884 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.821914911 CET	443	49729	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.823968887 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.823993921 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:20.824055910 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.824203014 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:20.824217081 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.506558895 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.507081985 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.507116079 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.508701086 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.508734941 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.524974108 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.525276899 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.525302887 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.525645018 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.525650978 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.583211899 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.583903074 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.584307909 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.584321976 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.584743977 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.584749937 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.584991932 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.585015059 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.585288048 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.585294008 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.635703087 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.636126995 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.636192083 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.636261940 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.636261940 CET	49731	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.636302948 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.636331081 CET	443	49731	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.638684034 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.638711929 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.638794899 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.638916969 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.638922930 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.655431986 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.655484915 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.655626059 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.655626059 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.655649900 CET	49732	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.655663013 CET	443	49732	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.657860041 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.657951117 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.658039093 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.658176899 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.658216953 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.719134092 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.719297886 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.719379902 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.719419956 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.719439030 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.719491005 CET	49733	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.719496965 CET	443	49733	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.721951008 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.721999884 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:21.722167015 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.722316980 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:21.722333908 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.037955046 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.038486958 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.038510084 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.039953947 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.039961100 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.205132008 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.205301046 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.205375910 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.205404997 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.205419064 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.205434084 CET	49734	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.205440044 CET	443	49734	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.208216906 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.208280087 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.208406925 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.208542109 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.208574057 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.377588034 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.380538940 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.380553961 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.380985022 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.380990028 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.434792995 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.435305119 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.435375929 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.435758114 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.435774088 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.491772890 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.492328882 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.492377043 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.492712021 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.492729902 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.509011030 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.509247065 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.509311914 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.509342909 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.509355068 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.509366035 CET	49735	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.509371996 CET	443	49735	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.511950016 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.512006044 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.512134075 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.512268066 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.512290001 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.569823027 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.570167065 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.570229053 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.570338964 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.570338964 CET	49736	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.570384026 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.570415020 CET	443	49736	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.572381973 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.572415113 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.572480917 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.572606087 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.572622061 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.627923965 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.628173113 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.628895044 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.629051924 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.629097939 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.629129887 CET	49737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.629146099 CET	443	49737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.631941080 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.631963968 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.632047892 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.632209063 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.632215977 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.979229927 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.979991913 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.980024099 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.980448008 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.980456114 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.995769978 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.995830059 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.995887041 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.996062040 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.996079922 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.996090889 CET	49725	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.996095896 CET	443	49725	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.999207020 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.999233961 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:22.999296904 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.999589920 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:22.999605894 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.113373995 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.113645077 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.113719940 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.113769054 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.113769054 CET	49738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.113789082 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.113800049 CET	443	49738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.116466999 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.116508961 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.116583109 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.116709948 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.116719007 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.278009892 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.278476954 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.278556108 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.278894901 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.278908968 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.340806961 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.341279984 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.341308117 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.341754913 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.341759920 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.374289036 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.374660015 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.374684095 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.375040054 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.375046015 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.413646936 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.413836002 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.413911104 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.413970947 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.413970947 CET	49739	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.414010048 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.414035082 CET	443	49739	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.416600943 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.416662931 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.416759014 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.416929007 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.416953087 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.505779982 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.505852938 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.505923033 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.506097078 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.506114960 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.506133080 CET	49741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.506139040 CET	443	49741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.508991957 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.509047031 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.509135008 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.509294033 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.509320021 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.629031897 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.629107952 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.629178047 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.629333973 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.629348040 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.629357100 CET	49740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.629360914 CET	443	49740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.631665945 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.631752968 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.631838083 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.631994009 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.632021904 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.732898951 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.733819962 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.733846903 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.734561920 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.734566927 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.863848925 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.863895893 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.863976955 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.864212990 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.864223003 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.864232063 CET	49742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.864237070 CET	443	49742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.866780996 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.866818905 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.867036104 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.867203951 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.867218971 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.908041000 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.908421993 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.908444881 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:23.908864021 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:23.908869982 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.055118084 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.055274963 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.055368900 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.055583954 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.055600882 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.055613995 CET	49743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.055619955 CET	443	49743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.058629036 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.058650017 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.058723927 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.058864117 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.058875084 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.151187897 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.151886940 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.151921988 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.152316093 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.152323008 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.269853115 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.270406008 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.270469904 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.270869970 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.270885944 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.282717943 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.282880068 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.282965899 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.283051014 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.283051014 CET	49744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.283097029 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.283149958 CET	443	49744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.285599947 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.285630941 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.285717964 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.285855055 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.285862923 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.401386023 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.401640892 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.401819944 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.401884079 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.401884079 CET	49745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.401926041 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.401951075 CET	443	49745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.404500961 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.404534101 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.404604912 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.404736042 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.404742956 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.407129049 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.407469988 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.407500029 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.407896996 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.407911062 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.543665886 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.543956041 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.544142962 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.544142962 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.544142962 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.546714067 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.546750069 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.546811104 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.546948910 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.546960115 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.630737066 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.631273031 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.631345034 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.631733894 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.631752968 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.767828941 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.767956972 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.768021107 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.778764009 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.778764009 CET	49747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.778814077 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.778841972 CET	443	49747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.787445068 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.787544012 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.787625074 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.791399002 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.791451931 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.811090946 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.811562061 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.811594009 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.812017918 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.812024117 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.855889082 CET	49746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.855922937 CET	443	49746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.952372074 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.952423096 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.952508926 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.952739954 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.952759027 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.952794075 CET	49748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.952800989 CET	443	49748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.955663919 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.955701113 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:24.955786943 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.955970049 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:24.955984116 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.035099030 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.036350965 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.036380053 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.036802053 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.036806107 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.310802937 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.310866117 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.311045885 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.311182976 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.311202049 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.311213017 CET	49749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.311218023 CET	443	49749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.313189983 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.313596964 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.313621998 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.314042091 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.314049006 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.314260006 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.314399004 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.314481020 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.314624071 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.314657927 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.548878908 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.549612045 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.549690962 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.549988031 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.550002098 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.567234039 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.567334890 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.567394972 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.567495108 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.567511082 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.567523003 CET	49750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.567529917 CET	443	49750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.570308924 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.570348024 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.570432901 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.570590973 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.570606947 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.668121099 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.668869019 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.668883085 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.669307947 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.669312000 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.680154085 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.680206060 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.680280924 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.680560112 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.680560112 CET	49752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.680578947 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.680588961 CET	443	49752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.683190107 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.683221102 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.683305025 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.683471918 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.683482885 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.734265089 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.734930992 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.734946012 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.735302925 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.735306978 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.799113989 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.799264908 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.799315929 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.799438953 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.799451113 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.799460888 CET	49751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.799464941 CET	443	49751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.802771091 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.802815914 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.802880049 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.803086042 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.803101063 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.871361017 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.871469021 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.871665001 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.871849060 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.871866941 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.871876001 CET	49753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.871881962 CET	443	49753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.874810934 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.874835014 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:25.874918938 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.875092983 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:25.875104904 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.081417084 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.082076073 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.082139015 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.082684994 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.082701921 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.406896114 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.407097101 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.407181025 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.407262087 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.407310963 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.407366037 CET	49754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.407381058 CET	443	49754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.409924984 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.409993887 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.410093069 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.410217047 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.410233974 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.536966085 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.537612915 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.537631035 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.537862062 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.537981987 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.537992001 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.538158894 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.538177967 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.538485050 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.538490057 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.580914974 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.581366062 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.581388950 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.581919909 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.581927061 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.615732908 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.616259098 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.616270065 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.616534948 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.616539955 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.668040037 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.668124914 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.668289900 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.668436050 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.668457031 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.668473959 CET	49755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.668479919 CET	443	49755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.671013117 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.671077013 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.671129942 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.671256065 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.671272039 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.671281099 CET	49756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.671287060 CET	443	49756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.671399117 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.671449900 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.671530008 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.671664000 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.671683073 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.673459053 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.673507929 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.673736095 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.673736095 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.673777103 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.718198061 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.718354940 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.718521118 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.718522072 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.718522072 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.720817089 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.720834970 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.720916986 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.721071959 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.721079111 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.745929956 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.746074915 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.746243954 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.746243954 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.746268988 CET	49758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.746277094 CET	443	49758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.748635054 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.748662949 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:26.748742104 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.749449015 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:26.749461889 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.027673960 CET	49757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.027704954 CET	443	49757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.171551943 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.172425985 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.172456026 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.172884941 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.172897100 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.321954966 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.322067976 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.322190046 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.322462082 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.322484970 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.322495937 CET	49759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.322500944 CET	443	49759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.325683117 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.325761080 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.325850964 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.325982094 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.326014996 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.457245111 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.457736969 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.457770109 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.458205938 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.458214045 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.458626986 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.458970070 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.459000111 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.459363937 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.459369898 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.460983038 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.461251974 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.461261034 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.461627007 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.461632013 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.520682096 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.521083117 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.521102905 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.521476984 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.521488905 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.587610960 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.587668896 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.587770939 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.587982893 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.588001966 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.588013887 CET	49762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.588021040 CET	443	49762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.591084957 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.591119051 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.591214895 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.591392040 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.591403961 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.593089104 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.593236923 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.593302965 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.593375921 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.593415976 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.593441963 CET	49761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.593456984 CET	443	49761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.595638037 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.595700979 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.595808983 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.595948935 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.595969915 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.596604109 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.596653938 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.596697092 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.596801996 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.596811056 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.596821070 CET	49760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.596826077 CET	443	49760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.598717928 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.598726034 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.598802090 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.598927021 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.598934889 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.658689976 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.658790112 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.658917904 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.658931971 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.658936977 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.658945084 CET	49763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.658948898 CET	443	49763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.660972118 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.661056042 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:27.661196947 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.661329985 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:27.661367893 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.063932896 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.065184116 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.065244913 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.065809011 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.065823078 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.199240923 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.199301958 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.199466944 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.199681044 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.199719906 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.199750900 CET	49764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.199765921 CET	443	49764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.219212055 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.219259024 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.219327927 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.219737053 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.219757080 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.338751078 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.339262962 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.339274883 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.339724064 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.339729071 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.341451883 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.341706991 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.341722965 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.342072010 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.342078924 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.471818924 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.471878052 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.471944094 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.472031116 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.472045898 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.472098112 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.526463985 CET	49766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.526482105 CET	443	49766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.526714087 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.526724100 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.526757002 CET	49767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.526762962 CET	443	49767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.530144930 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.530206919 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.530294895 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.530546904 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.530576944 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.531378031 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.531413078 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.531474113 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.531594038 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.531610012 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.734736919 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.735270023 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.735285044 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.735723019 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.735728025 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.795392990 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.799197912 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.799232960 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.799711943 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.799729109 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.868907928 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.869618893 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.869678020 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.869702101 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.869716883 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.869725943 CET	49765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.869729996 CET	443	49765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.872675896 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.872706890 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.872771025 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.872956991 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.872967958 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.933260918 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.933410883 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.933499098 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.933499098 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.933554888 CET	49768	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.933579922 CET	443	49768	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.936114073 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.936150074 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.936208963 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.936319113 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.936333895 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.951719046 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.952153921 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.952171087 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:28.952542067 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:28.952555895 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.082510948 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.082655907 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.082709074 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.082787991 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.082808971 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.082820892 CET	49769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.082825899 CET	443	49769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.085127115 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.085151911 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.085221052 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.085350037 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.085356951 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.283400059 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.300517082 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.307921886 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.307965994 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.308427095 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.308446884 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.308793068 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.308835030 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.309185028 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.309197903 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.438258886 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.438349009 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.438426971 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.439697027 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.440320969 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.440385103 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.617259026 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.665836096 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.718575954 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.718605042 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.718616962 CET	49771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.718624115 CET	443	49771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.718770981 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.718770981 CET	49770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.718822002 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.718847036 CET	443	49770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.725991964 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.726001024 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.726425886 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.726428986 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.733030081 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.733069897 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.733134985 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.736092091 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.736120939 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.736180067 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.736279964 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.736296892 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.736346960 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.736361980 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.842184067 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.851816893 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.851969957 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.852024078 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.884555101 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.907536030 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.907542944 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.907996893 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.908001900 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.908226967 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.908236980 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.908248901 CET	49772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.908252954 CET	443	49772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.919287920 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.919374943 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:29.919466019 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.919830084 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:29.919863939 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.070825100 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.118984938 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.210565090 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.210577965 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.211081982 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.211086988 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.347476006 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.347542048 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.347615004 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.368904114 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.368905067 CET	49773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.368925095 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.368935108 CET	443	49773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.411020041 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.411060095 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.411169052 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.416510105 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.416526079 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.451162100 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.451299906 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.451354027 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.451447964 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.451461077 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.451472044 CET	49774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.451477051 CET	443	49774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.453857899 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.453877926 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.453958988 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.454152107 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.454164982 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.478344917 CET	49783	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:30.478362083 CET	443	49783	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:30.478413105 CET	49783	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:30.478965044 CET	49784	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:30.478995085 CET	443	49784	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:30.479043007 CET	49784	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:30.479182005 CET	49783	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:30.479197025 CET	443	49783	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:30.479342937 CET	49784	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:30.479360104 CET	443	49784	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:30.497397900 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.497837067 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.497854948 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.498270035 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.498275042 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.629111052 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.629318953 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.629389048 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.630070925 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.630090952 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.630104065 CET	49776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.630110025 CET	443	49776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.633018970 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.633040905 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.633147955 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.633320093 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.633335114 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.709389925 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.709992886 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.710037947 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.710489988 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.710509062 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.846324921 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.846458912 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.846647024 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.846647024 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.846723080 CET	49777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.846757889 CET	443	49777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.850023031 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.850122929 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.850202084 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.850388050 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.850423098 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.942426920 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.943238020 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.943253994 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:30.943837881 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:30.943845034 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.077004910 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.077454090 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.077506065 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.077570915 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.077586889 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.077601910 CET	49775	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.077608109 CET	443	49775	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.082575083 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.082613945 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.082674980 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.082837105 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.082854033 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.259164095 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.259644985 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.259668112 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.260243893 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.260250092 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.391841888 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.392628908 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.392646074 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.392971992 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.392976999 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.423567057 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.423952103 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.424010038 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.424046040 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.424069881 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.424081087 CET	49778	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.424087048 CET	443	49778	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.426907063 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.426927090 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.427182913 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.427182913 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.427206993 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.524907112 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.525137901 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.525296926 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.525296926 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.525296926 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.527909994 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.527986050 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.528067112 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.528203011 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.528223991 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.601147890 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.601758003 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.601789951 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.602119923 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.602130890 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.732430935 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.732568979 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.732722044 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.732774973 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.732774973 CET	49786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.732809067 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.732835054 CET	443	49786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.736098051 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.736113071 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.736190081 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.736325979 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.736335039 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.830202103 CET	49785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.830223083 CET	443	49785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.851286888 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.852541924 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.852571964 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.853101969 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:31.853108883 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.987031937 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.987159014 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:31.987262964 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.147336006 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.147356033 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.147401094 CET	49787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.147408962 CET	443	49787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.166860104 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.166935921 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.167016983 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.169784069 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.169815063 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.200500011 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.200932026 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.200951099 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.201421022 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.201426029 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.223975897 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.224459887 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.224489927 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.224939108 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.224946976 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.288695097 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.289221048 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.289259911 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.289663076 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.289676905 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.357403040 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.357439041 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.357561111 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.357750893 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.357767105 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.357779980 CET	49780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.357785940 CET	443	49780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.364290953 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.364336967 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.364425898 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.364578009 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.364607096 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.392658949 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.392751932 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.392834902 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.392997026 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.392997026 CET	49788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.393007994 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.393014908 CET	443	49788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.395654917 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.395679951 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.395755053 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.395898104 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.395912886 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.423655987 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.423789024 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.423917055 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.431453943 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.431453943 CET	49789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.431487083 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.431513071 CET	443	49789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.438743114 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.438788891 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.438868999 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.439476967 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.439502954 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.490947008 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.512448072 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.512460947 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.512898922 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.512902975 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.662281990 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.662662029 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.662741899 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.662810087 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.662810087 CET	49790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.662816048 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.662823915 CET	443	49790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.665364027 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.665374994 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.665477991 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.665621042 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.665632010 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.958098888 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.958887100 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.958914995 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:32.959472895 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:32.959480047 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.094898939 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.094957113 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.095052958 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.095278978 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.095294952 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.095321894 CET	49791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.095328093 CET	443	49791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.098690987 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.098707914 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.098790884 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.098923922 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.098938942 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.138760090 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.139260054 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.139292955 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.139705896 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.139712095 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.206873894 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.207331896 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.207408905 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.207736015 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.207757950 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.269606113 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.269706964 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.269768953 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.269939899 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.269948006 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.269957066 CET	49793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.269961119 CET	443	49793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.272902966 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.272913933 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.273000956 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.273169994 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.273179054 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.337527037 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.337846994 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.337935925 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.338028908 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.338067055 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.338126898 CET	49794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.338143110 CET	443	49794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.340444088 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.340502024 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.340585947 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.340709925 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.340730906 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.415617943 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.416178942 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.416193962 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.416619062 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.416621923 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.545833111 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.546286106 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.546343088 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.546427965 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.546441078 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.546452045 CET	49796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.546456099 CET	443	49796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.549423933 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.549462080 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.549535990 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.549722910 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.549737930 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.864135027 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.864875078 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.864942074 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.865339041 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.865359068 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.999056101 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.999270916 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.999341965 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.999418974 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.999418974 CET	49797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:33.999454021 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:33.999480009 CET	443	49797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.004188061 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.004221916 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.004303932 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.004448891 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.004465103 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.011672020 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.011971951 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.011996031 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.012414932 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.012418985 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.077218056 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.077619076 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.077635050 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.078031063 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.078037024 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.142426968 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.142478943 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.142604113 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.142827034 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.142827034 CET	49798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.142838955 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.142848015 CET	443	49798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.145566940 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.145607948 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.145716906 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.145870924 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.145888090 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.208045006 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.208123922 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.208190918 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.208357096 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.208369017 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.208420992 CET	49799	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.208434105 CET	443	49799	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.210735083 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.210756063 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.210829020 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.210975885 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.210988998 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.294825077 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.295277119 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.295298100 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.295675039 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.295680046 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.423886061 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.424118996 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.424225092 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.424256086 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.424256086 CET	49800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.424280882 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.424289942 CET	443	49800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.427131891 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.427186966 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.427262068 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.427437067 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.427455902 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.777410030 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.777971983 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.777987957 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.778554916 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.778558969 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.871551037 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:34.871566057 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:34.871623993 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:34.871965885 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:34.871978998 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:34.914387941 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.915600061 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.915600061 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.915623903 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.915637970 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.917076111 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.917123079 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.917180061 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.917356014 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.917356014 CET	49801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.917382002 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.917407990 CET	443	49801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.920304060 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.920332909 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.920408964 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.920597076 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.920610905 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.944438934 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.944972992 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.944986105 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:34.945436001 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:34.945441008 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.049901962 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.050304890 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.050363064 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.050400972 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.050424099 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.050434113 CET	49802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.050440073 CET	443	49802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.054846048 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.054869890 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.054953098 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.055120945 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.055146933 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.073405027 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.073467970 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.073513031 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.073652029 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.073658943 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.073672056 CET	49803	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.073677063 CET	443	49803	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.076467991 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.076476097 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.076540947 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.076699018 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.076709986 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.208633900 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.209136009 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.209162951 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.209711075 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.209718943 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.340025902 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.340920925 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.340991974 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.341027021 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.341047049 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.341058016 CET	49804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.341063023 CET	443	49804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.343811989 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.343847990 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.343965054 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.344124079 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.344147921 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.718961954 CET	50736	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:35.723866940 CET	53	50736	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:35.723951101 CET	50736	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:35.723999023 CET	50736	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:35.729476929 CET	53	50736	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:35.731857061 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:35.732129097 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:35.732140064 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:35.733154058 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:35.733222008 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:35.734293938 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:35.734353065 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:35.786781073 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:35.786789894 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:35.833862066 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:35.845452070 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.845958948 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.845974922 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:35.846424103 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:35.846429110 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.035828114 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.035861969 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.035918951 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.035923004 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.035974026 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.036174059 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.036185980 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.036197901 CET	49810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.036204100 CET	443	49810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.038750887 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.038763046 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.038831949 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.038980961 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.038991928 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.105531931 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.106004000 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.106018066 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.106435061 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.106440067 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.243468046 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.243706942 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.243757963 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.243793011 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.243799925 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.243810892 CET	49807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.243815899 CET	443	49807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.246413946 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.246448994 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.246526003 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.246655941 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.246671915 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.325759888 CET	53	50736	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:36.328675985 CET	50736	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:36.334347963 CET	53	50736	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:36.334424973 CET	50736	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:36.869152069 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.869752884 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.869843006 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.870214939 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.870229006 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.920953989 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.921632051 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.921664000 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:36.922168016 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:36.922173977 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.009408951 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.009886980 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.009912968 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.010332108 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.010338068 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.050129890 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.050400972 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.050462008 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.050520897 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.050532103 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.050540924 CET	50737	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.050545931 CET	443	50737	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.053725004 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.053766012 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.053837061 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.053966999 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.053982019 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.124867916 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.125361919 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.125380039 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.125807047 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.125812054 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.146683931 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.146708012 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.146760941 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.146781921 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.146805048 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.146842957 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.147030115 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.147048950 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.147058010 CET	50738	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.147063017 CET	443	50738	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.149929047 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.149977922 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.150072098 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.150260925 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.150279045 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.160826921 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.161488056 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.161560059 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.161638975 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.161638975 CET	49792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.161681890 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.161705971 CET	443	49792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.164191961 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.164226055 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.164320946 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.164467096 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.164484978 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.257258892 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.257436037 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.257494926 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.257577896 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.257577896 CET	49811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.257592916 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.257605076 CET	443	49811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.260304928 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.260338068 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.260406017 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.260540009 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.260555983 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.270673990 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.271095991 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.271117926 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.271536112 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.271541119 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.404795885 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.404980898 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.405064106 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.405122995 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.405122995 CET	49808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.405172110 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.405193090 CET	443	49808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.409116030 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.409132004 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.409220934 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.409352064 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.409359932 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.815993071 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.816680908 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.816701889 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.817190886 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.817197084 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.916059971 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.916611910 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.916673899 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.917073965 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.917081118 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.930455923 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.930845022 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.930861950 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.931412935 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.931418896 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.950475931 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.950504065 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.950551033 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.950558901 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.950584888 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.950596094 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.950628996 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.950727940 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.950742006 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.950758934 CET	50740	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.950764894 CET	443	50740	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.953515053 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.953541994 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:37.953607082 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.954200029 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:37.954211950 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.033991098 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.034660101 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.034714937 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.035094976 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.035100937 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.056260109 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.056283951 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.056351900 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.056363106 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.056719065 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.056768894 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.057780027 CET	50741	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.057792902 CET	443	50741	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.060789108 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.060806036 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.060924053 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.061074018 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.061084986 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.068990946 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.069044113 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.069118977 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.069236994 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.069237947 CET	50742	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.069251060 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.069258928 CET	443	50742	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.071229935 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.071257114 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.071355104 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.071470022 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.071487904 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.197706938 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.197943926 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.198000908 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.198081970 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.198090076 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.198103905 CET	50743	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.198110104 CET	443	50743	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.198915958 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.199368000 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.199381113 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.199867964 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.199872017 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.201661110 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.201720953 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.201805115 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.201961040 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.201980114 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.342585087 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.343637943 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.343707085 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.343806982 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.343806982 CET	50744	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.343820095 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.343830109 CET	443	50744	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.346626997 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.346646070 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.346757889 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.346918106 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.346927881 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.702761889 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.703253031 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.703270912 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.703717947 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.703725100 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.812788963 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.813333035 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.813360929 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.813812971 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.813818932 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.827655077 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.828054905 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.828072071 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:38.828459978 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:38.828465939 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.162312984 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.162365913 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.162415981 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.162707090 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.162729025 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.162743092 CET	50747	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.162750006 CET	443	50747	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.165956020 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.166002035 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.166042089 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.166297913 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.166313887 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.166325092 CET	50746	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.166332006 CET	443	50746	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.166655064 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.166722059 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.166790962 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.167012930 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.167032957 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.167037010 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.167104006 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.167145967 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.167339087 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.167339087 CET	50745	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.167350054 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.167361021 CET	443	50745	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.169271946 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.170838118 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.170864105 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.171407938 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.171439886 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.171488047 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.171614885 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.171623945 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.171694040 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.171700001 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.173546076 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.173557043 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.173644066 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.174282074 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.174292088 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.325138092 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.325333118 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.325403929 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.325485945 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.325524092 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.325553894 CET	50748	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.325567961 CET	443	50748	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.327919006 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.327958107 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.328030109 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.328171015 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.328191042 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.930213928 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.930676937 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.930711985 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.931103945 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.931112051 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.964759111 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.965249062 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.965261936 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.965845108 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.965850115 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.965965986 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.966357946 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.966370106 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:39.966779947 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:39.966784000 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.060012102 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.060066938 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.060117960 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.060420036 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.060437918 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.060451031 CET	50750	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.060458899 CET	443	50750	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.070764065 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.070785999 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.070842028 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.071208000 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.071218967 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.097671986 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.100362062 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.101031065 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.101066113 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.101077080 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.101114988 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.102659941 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.102713108 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.102760077 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.142302990 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.165091038 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.165103912 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.165925980 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.165932894 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.166632891 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.166645050 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.166655064 CET	50752	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.166661978 CET	443	50752	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.166740894 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.166743994 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.166753054 CET	50751	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.166757107 CET	443	50751	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.176357031 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.176393986 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.176455975 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.177421093 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.177486897 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.177573919 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.177722931 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.177736044 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.177910089 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.177927017 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.245023966 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.245507002 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.245518923 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.248914003 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.248918056 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.326380968 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.326594114 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.326657057 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.326713085 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.326728106 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.326740980 CET	50753	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.326746941 CET	443	50753	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.329961061 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.329996109 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.330092907 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.330230951 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.330252886 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.380481005 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.380530119 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.380578995 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.380752087 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.380764008 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.380774975 CET	50749	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.380779028 CET	443	50749	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.383130074 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.383157015 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:40.383223057 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.383409977 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:40.383423090 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.063266993 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.064409971 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.064424992 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.065445900 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.065449953 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.196755886 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.196791887 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.196824074 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.196837902 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.196877956 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.197105885 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.197115898 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.197124004 CET	50754	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.197129011 CET	443	50754	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.199964046 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200007915 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200138092 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.200176954 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200232983 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200259924 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.200421095 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.200438023 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200586081 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.200603962 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.200618029 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200633049 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.200999975 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.201011896 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.201236010 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.201239109 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.201391935 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.201392889 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.201395035 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.201400995 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.210242987 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.210601091 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.210617065 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.210971117 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.210975885 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.333511114 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.334031105 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.334064960 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.334083080 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.334119081 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.334189892 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.334198952 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.334214926 CET	50758	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.334219933 CET	443	50758	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.336019039 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.336076975 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.336126089 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.336255074 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.336277008 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.336293936 CET	50755	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.336301088 CET	443	50755	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.336869001 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.336905003 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.336966991 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.337169886 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.337184906 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.338428974 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.338457108 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.338521004 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.338628054 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.338641882 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341373920 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341434956 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341483116 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.341568947 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341604948 CET	50756	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.341609955 CET	443	50756	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341736078 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341789007 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.341828108 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.341846943 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.341860056 CET	50757	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.341866970 CET	443	50757	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.343813896 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.343822002 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.343924046 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.343945980 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.343957901 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.344003916 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.344042063 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.344050884 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.344149113 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.344172955 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.943839073 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.944377899 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.944399118 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:41.944879055 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:41.944885969 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.072084904 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.073185921 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.073223114 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.074166059 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.074172020 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.078461885 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.078516006 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.078574896 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.078756094 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.078764915 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.078808069 CET	50759	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.078814030 CET	443	50759	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.082052946 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.082082987 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.082156897 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.082334995 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.082345963 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.086591959 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.086911917 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.086935997 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.087425947 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.087430954 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.112876892 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.114080906 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.114099026 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.114478111 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.114485025 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.115470886 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.115885973 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.115897894 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.116319895 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.116323948 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.214056969 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.214112997 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.214167118 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.215888977 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.215888977 CET	50761	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.215909004 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.215919018 CET	443	50761	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.218667030 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.218703032 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.218771935 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.218878031 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.218893051 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.250454903 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.250495911 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.250597954 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.250648022 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.250664949 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.251430035 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.251574039 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.251656055 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.252788067 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.252801895 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.252811909 CET	50762	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.252815962 CET	443	50762	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.253789902 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.253789902 CET	50763	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.253798008 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.253806114 CET	443	50763	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.256119013 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.256146908 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.256217003 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.256438017 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.256448030 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.257030010 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.257049084 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.257111073 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.257209063 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.257220984 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.739295959 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.739356041 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.739418983 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.739655018 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.739661932 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.739674091 CET	50760	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.739679098 CET	443	50760	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.742615938 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.742630005 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.742712975 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.742887020 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.742897034 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.822865963 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.823286057 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.823307037 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.823729038 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.823733091 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.954278946 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.954493999 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.954524994 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.954550982 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.954602957 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.954636097 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.954644918 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.954658985 CET	50764	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.954663038 CET	443	50764	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.958101034 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.958142042 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.958214998 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.958493948 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.958518982 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.993541956 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.993942976 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.993964911 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:42.994544983 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:42.994551897 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.030658960 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.031035900 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.031114101 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.031133890 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.031333923 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.031344891 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.031692982 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.031706095 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.031917095 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.031920910 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.166014910 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.166148901 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.166239977 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.166321039 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.166327000 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.166337967 CET	50766	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.166342020 CET	443	50766	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.168708086 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.168720961 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.168806076 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.168921947 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.168927908 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.202292919 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.202344894 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.202408075 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.202573061 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.202593088 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.202608109 CET	50767	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.202614069 CET	443	50767	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.205176115 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.205199003 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.205322027 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.205425024 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.205440044 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.267942905 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.268124104 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.268183947 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.268219948 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.268224955 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.268269062 CET	50765	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.268273115 CET	443	50765	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.270409107 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.270426989 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.270524025 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.270634890 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.270644903 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.481192112 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.481779099 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.481791973 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.482136965 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.482141018 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.614628077 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.614648104 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.614680052 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.614725113 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.614754915 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.614979029 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.614988089 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.614998102 CET	50769	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.615005970 CET	443	50769	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.617878914 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.617921114 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.618024111 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.618204117 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.618223906 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.698517084 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.698995113 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.699018002 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.699439049 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.699445009 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.965292931 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.965786934 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.965804100 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:43.966212988 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:43.966222048 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.012514114 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.013021946 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.013106108 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.013484955 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.013489008 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.103111029 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.103343010 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.103421926 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.103482008 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.103494883 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.103506088 CET	50771	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.103509903 CET	443	50771	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.105808020 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.105859041 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.105926991 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.106061935 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.106082916 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.145062923 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.145086050 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.145116091 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.145179987 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.145389080 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.145402908 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.145414114 CET	50773	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.145417929 CET	443	50773	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.147875071 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.147901058 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.147990942 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.148135900 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.148153067 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.273149014 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.273287058 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.273369074 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.273423910 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.273447037 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.273458004 CET	50770	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.273463011 CET	443	50770	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.276108027 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.276122093 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.276194096 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.276321888 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.276333094 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.311180115 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.311650991 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.311686039 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.312117100 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.312123060 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.354836941 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.355292082 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.355309010 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.355710030 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.355716944 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.444422960 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.444475889 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.444542885 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.444777966 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.444798946 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.444811106 CET	50772	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.444817066 CET	443	50772	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.447434902 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.447465897 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.447540045 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.447715998 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.447731972 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.498996019 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.499041080 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.499104977 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.499294996 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.499305964 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.499319077 CET	50774	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.499321938 CET	443	50774	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.506620884 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.506655931 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.506752968 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.506918907 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.506930113 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.878598928 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.879190922 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.879232883 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.879720926 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.879729986 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.885863066 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.886286974 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.886311054 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:44.886691093 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:44.886694908 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.014383078 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.014520884 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.014580965 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.014755011 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.014779091 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.014792919 CET	50776	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.014800072 CET	443	50776	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.016371965 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.016442060 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.016491890 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.016830921 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.016841888 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.016851902 CET	50777	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.016856909 CET	443	50777	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.017951012 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.017971992 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.018039942 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.018274069 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.018284082 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.019496918 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.019545078 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.019622087 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.019731998 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.019747972 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.025947094 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.026305914 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.026314974 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.026802063 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.026806116 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.200095892 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.202205896 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.202240944 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.202677965 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.202682972 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.319464922 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.319506884 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.319539070 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.319569111 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.319613934 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.319813967 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.319824934 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.319833994 CET	50779	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.319838047 CET	443	50779	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.322437048 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.322459936 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.322515965 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.322673082 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.322683096 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.334173918 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.334321022 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.334383011 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.334410906 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.334428072 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.334439993 CET	50780	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.334445953 CET	443	50780	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.336740017 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.336782932 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.337028027 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.337028027 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.337059021 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.584863901 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.585300922 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.585359097 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.585752964 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.585767984 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.728723049 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:45.728771925 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:45.728832960 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:45.764070988 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.764563084 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.764612913 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.765012026 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.765022993 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.790258884 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.794523001 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.794553995 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.794939995 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.794945955 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.873771906 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.873822927 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.873915911 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.874079943 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.874118090 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.874146938 CET	50781	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.874161959 CET	443	50781	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.876575947 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.876596928 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.876667976 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.876787901 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.876797915 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.901282072 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.901416063 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.901464939 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.901515007 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.901563883 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.902992010 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.902992010 CET	50783	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.903012037 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.903034925 CET	443	50783	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.905244112 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.905283928 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.905359030 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.905472994 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.905488968 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.926629066 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.926774025 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.926984072 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.927031994 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.927047014 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.927058935 CET	50782	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.927064896 CET	443	50782	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.929918051 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.929941893 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:45.929996014 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.930335045 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:45.930344105 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.069911957 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.070370913 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.070386887 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.070935011 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.070940018 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.094616890 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.095098019 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.095119953 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.096069098 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.096075058 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.225900888 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.226017952 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.226119995 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.226136923 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.226176023 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.226226091 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.226342916 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.226360083 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.226399899 CET	50786	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.226404905 CET	443	50786	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.229089975 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.229126930 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.229196072 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.229346037 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.229360104 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.344947100 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.345029116 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.345093966 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.346887112 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.346899033 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.346956968 CET	50785	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.346966028 CET	443	50785	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.349822998 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.349852085 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.350117922 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.350305080 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.350316048 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.568901062 CET	49806	443	192.168.2.5	142.250.181.228
Oct 31, 2024 21:07:46.568929911 CET	443	49806	142.250.181.228	192.168.2.5
Oct 31, 2024 21:07:46.618145943 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.622996092 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.623018026 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.623431921 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.623437881 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.658319950 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.659862041 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.659885883 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.660306931 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.660314083 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.683665991 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.684056997 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.684077978 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.684448957 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.684453011 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.751869917 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.751915932 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.752003908 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.752216101 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.752230883 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.752245903 CET	50787	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.752252102 CET	443	50787	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.755070925 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.755119085 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.755207062 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.755362988 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.755378008 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.792678118 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.792709112 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.792756081 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.792782068 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.792817116 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.792979956 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.792996883 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.793006897 CET	50788	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.793011904 CET	443	50788	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.795315027 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.795341015 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.795567036 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.795567036 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.795592070 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.811347008 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.811491013 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.811597109 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.811628103 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.811640978 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.811655045 CET	50789	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.811659098 CET	443	50789	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.814611912 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.814641953 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:46.814709902 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.814840078 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:46.814856052 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.009780884 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.010265112 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.010291100 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.010807991 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.010812998 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.081540108 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.082856894 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.082889080 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.083581924 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.083590984 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.140364885 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.140398026 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.140464067 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.140544891 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.140753031 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.140772104 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.140783072 CET	50790	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.140789032 CET	443	50790	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.143627882 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.143656015 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.143735886 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.143923998 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.143935919 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.213498116 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.213558912 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.213778973 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.213808060 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.213828087 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.213840961 CET	50791	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.213849068 CET	443	50791	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.216430902 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.216466904 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.216535091 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.216691971 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.216703892 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.508070946 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.508666992 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.508712053 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.509139061 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.509145021 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.534219027 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.534758091 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.534773111 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.535211086 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.535216093 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.572052956 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.572490931 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.572511911 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.572932005 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.572937012 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.640932083 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.640979052 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.641030073 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.641091108 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.641357899 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.641376019 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.641426086 CET	50792	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.641431093 CET	443	50792	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.644264936 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.644311905 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.644381046 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.644633055 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.644649029 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.666240931 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.666549921 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.666626930 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.668915987 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.668930054 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.668941975 CET	50793	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.668947935 CET	443	50793	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.671883106 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.671924114 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.672027111 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.672139883 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.672154903 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.684798002 CET	443	49784	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:47.684876919 CET	49784	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:47.685013056 CET	49784	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:47.685025930 CET	443	49784	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:47.685436964 CET	50799	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:47.685456038 CET	443	50799	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:47.685527086 CET	50799	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:47.685781002 CET	50799	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:47.685794115 CET	443	50799	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:47.704154015 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.704349041 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.704401970 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.705790997 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.705799103 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.705811024 CET	50794	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.705816031 CET	443	50794	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.708250046 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.708268881 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.708329916 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.708461046 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.708472013 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.882572889 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.883230925 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.883244038 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.883691072 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.883697033 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.951973915 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.952455044 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.952481031 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:47.952907085 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:47.952912092 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.015827894 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.016176939 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.016233921 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.016661882 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.016675949 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.016685009 CET	50795	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.016690969 CET	443	50795	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.023888111 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.023932934 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.024003029 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.024393082 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.024408102 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.090663910 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.090693951 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.090740919 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.090761900 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.090795040 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.091001987 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.091017008 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.091029882 CET	50796	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.091036081 CET	443	50796	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.093830109 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.093848944 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.093934059 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.094098091 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.094113111 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.518929958 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.519696951 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.519711971 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.520268917 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.520273924 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.521671057 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.522051096 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.522105932 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.522479057 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.522490978 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.653387070 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.653541088 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.653661966 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.653726101 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.653738976 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.653753996 CET	50800	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.653759956 CET	443	50800	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.654304028 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.654370070 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.654429913 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.654542923 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.654580116 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.654607058 CET	50797	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.654623032 CET	443	50797	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.656347036 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.656385899 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.656469107 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.656570911 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.656595945 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.656605005 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.656610966 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.656666994 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.656744003 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.656752110 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.798104048 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.798716068 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.798784971 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.799170017 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.799201012 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.821135044 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.821479082 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.821499109 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.821974993 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.821980000 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.840320110 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.840651035 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.840662956 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.841049910 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.841054916 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.932435036 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.932635069 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.932698965 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.932764053 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.932821989 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.932848930 CET	50801	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.932862997 CET	443	50801	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.936830997 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.936891079 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.936980009 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.937115908 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.937135935 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.957401991 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.957478046 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.957520008 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.957521915 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.957564116 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.957618952 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.957633018 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.957653999 CET	50798	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.957659960 CET	443	50798	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.959783077 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.959804058 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.959880114 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.960037947 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.960047960 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.972220898 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.972316027 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.972362995 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.972425938 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.972425938 CET	50802	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.972435951 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.972444057 CET	443	50802	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.974647999 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.974673033 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:48.974740028 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.974899054 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:48.974910021 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.198601961 CET	443	49783	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:49.198657990 CET	49783	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:49.198745966 CET	49783	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:49.198760986 CET	443	49783	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:49.199389935 CET	50809	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:49.199429989 CET	443	50809	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:49.199505091 CET	50809	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:49.199774981 CET	50809	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:07:49.199785948 CET	443	50809	93.157.106.19	192.168.2.5
Oct 31, 2024 21:07:49.423710108 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.424236059 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.424257040 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.424814939 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.424822092 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.559636116 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.559680939 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.559746981 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.559976101 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.559977055 CET	50805	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.559989929 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.559999943 CET	443	50805	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.563041925 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.563076973 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.563147068 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.563286066 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.563302040 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.690607071 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.691121101 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.691138983 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.691849947 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.691858053 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.719289064 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.722995043 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.723015070 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.723643064 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.723649025 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.779819012 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.780472994 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.780494928 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.781394958 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.781400919 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.822406054 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.822464943 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.822513103 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.822568893 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.822753906 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.822768927 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.822782040 CET	50806	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.822788000 CET	443	50806	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.825478077 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.825519085 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.825602055 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.825719118 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.825735092 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.854342937 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.854441881 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.854506969 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.854621887 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.854638100 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.854650974 CET	50808	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.854659081 CET	443	50808	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.856789112 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.856812954 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.856879950 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.856981039 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.856991053 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.912369967 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.912448883 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.912561893 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.912566900 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.912621021 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.912734032 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.912749052 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.912765026 CET	50804	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.912770987 CET	443	50804	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.915365934 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.915406942 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:49.915478945 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.915668011 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:49.915683985 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.425055981 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.425834894 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.425853968 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.426240921 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.426246881 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.736331940 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.737368107 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.737399101 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.738347054 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.738418102 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.738534927 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.738620996 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.738627911 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.738883972 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.738883972 CET	50807	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.738909006 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.738924980 CET	443	50807	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.743463039 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.743491888 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.743634939 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.743781090 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.743793964 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.868083000 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.868238926 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.868385077 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.868443012 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.868443012 CET	50810	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.868482113 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.868510008 CET	443	50810	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.869446039 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.869648933 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.870033979 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.870062113 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.870066881 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.870085001 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.870476961 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.870482922 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.870548010 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.870552063 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.871752024 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.871784925 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.871911049 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.871989012 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.872004986 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.874320984 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.874613047 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.874645948 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:50.874986887 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:50.874994040 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.008801937 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.008955956 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.009155989 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.009206057 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.009229898 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.009239912 CET	50813	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.009244919 CET	443	50813	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.010210037 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.011080980 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.011995077 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012047052 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012053967 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.012173891 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012202024 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012212992 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.012228966 CET	50812	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012233973 CET	443	50812	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.012299061 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012327909 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.012680054 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.012736082 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.012836933 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012942076 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012942076 CET	50811	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.012954950 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.013010979 CET	443	50811	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.014782906 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.014808893 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.014913082 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.014990091 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.015003920 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.015029907 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.015043974 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.015079021 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.015264988 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.015275955 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.491234064 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.492698908 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.492727041 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.493191004 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.493197918 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.622658968 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.623179913 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.623205900 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.623620987 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.623630047 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.625411034 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.625466108 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.625659943 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.625694036 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.625694036 CET	50814	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.625710011 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.625724077 CET	443	50814	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.628350973 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.628402948 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.628479958 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.628654957 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.628678083 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.754601002 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.754633904 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.754677057 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.754682064 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.754720926 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.754940987 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.754955053 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.754982948 CET	50815	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.754988909 CET	443	50815	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.757719040 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.757747889 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.757836103 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.757997036 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.758006096 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.762504101 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.762830019 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.762856007 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.763200998 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.763240099 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.763247013 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.763479948 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.763504028 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.763791084 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.763797045 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.768316031 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.768654108 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.768670082 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.768986940 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.768990993 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.893160105 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.893318892 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.893382072 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.893598080 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.893598080 CET	50817	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.893623114 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.893635035 CET	443	50817	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.896267891 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.896333933 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.896394014 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.896552086 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.896579027 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.896593094 CET	50816	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.896599054 CET	443	50816	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.896795034 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.896820068 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.896899939 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.897018909 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.897034883 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.899163961 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.899208069 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:51.899287939 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.899435997 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:51.899452925 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.857423067 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.857502937 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.857589006 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.857773066 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.857790947 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.857801914 CET	50818	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.857808113 CET	443	50818	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.859380007 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.864167929 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.864196062 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.864629030 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.864638090 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.867257118 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.867299080 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:52.867378950 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.867482901 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:52.867494106 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.004215002 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.004266024 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.004337072 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.004358053 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.004404068 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.004453897 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.006382942 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.006383896 CET	50819	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.006402969 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.006412983 CET	443	50819	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.010143995 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.010569096 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.010605097 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.010680914 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.010879993 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.010899067 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.011321068 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.011327028 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.011435986 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.011451006 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.014715910 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.014759064 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.015115976 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.015142918 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.015480995 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.015486956 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.015558004 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.015577078 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.015882015 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.015887022 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144541979 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144577980 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144608974 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144663095 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.144675970 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144686937 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144725084 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.144850969 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144889116 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.144891977 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.144926071 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.144993067 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.145010948 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.145024061 CET	50820	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.145030022 CET	443	50820	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.146234035 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.146254063 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.146264076 CET	50821	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.146270037 CET	443	50821	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.147430897 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.147619963 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.147674084 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.148474932 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.148513079 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.148585081 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.153371096 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.153378010 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.153403044 CET	50822	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.153408051 CET	443	50822	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.154710054 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.154730082 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.154812098 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.155781031 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.155793905 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.155843973 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.155885935 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.155900002 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.155941963 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.155956030 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.156040907 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.156052113 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.648144007 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.648669958 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.648691893 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.649070024 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.649075031 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.782996893 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.783426046 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.783446074 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.783898115 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.783901930 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.895030975 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.895169973 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.895558119 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.895572901 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.895601034 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.895627022 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.896023035 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.896028042 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.896152973 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.896157980 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.914589882 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.915051937 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.915067911 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.915314913 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.915319920 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.918142080 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.918308973 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.918374062 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.918401957 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.918415070 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.918423891 CET	50824	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.918428898 CET	443	50824	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.921076059 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.921108007 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.921192884 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.921333075 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.921346903 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.939486980 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.939517021 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.939558029 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.939673901 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.939673901 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.939774990 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.939790964 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.939800024 CET	50823	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.939805031 CET	443	50823	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.942511082 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.942550898 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:53.942631006 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.942730904 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:53.942747116 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.027988911 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.028042078 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.028079033 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.028090954 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.028151035 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.028443098 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.028464079 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.028474092 CET	50827	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.028481007 CET	443	50827	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.029815912 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.029885054 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.029932976 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.029973984 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.030015945 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.030030012 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.030046940 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.030046940 CET	50826	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.030054092 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.030062914 CET	443	50826	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.033287048 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.033322096 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.033386946 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.033803940 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.033832073 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.033886909 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.034166098 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.034182072 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.034426928 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.034437895 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.049972057 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.049997091 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.050035000 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.050041914 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.050086021 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.050477982 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.050488949 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.050498962 CET	50825	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.050502062 CET	443	50825	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.054364920 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.054390907 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.054454088 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.054677963 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.054692984 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.688219070 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.690635920 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.690670013 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.691063881 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.691076040 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.710774899 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.711149931 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.711185932 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.711596012 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.711605072 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.774945974 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.775381088 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.775398016 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.775862932 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.775867939 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.825035095 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.825999975 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.826097012 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.826155901 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.826155901 CET	50828	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.826206923 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.826231003 CET	443	50828	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.828773022 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.828810930 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.828912020 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.829121113 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.829135895 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.830508947 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.830892086 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.830926895 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.831362009 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.831372976 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.848448038 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.848587990 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.848649025 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.848709106 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.848725080 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.848737001 CET	50829	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.848743916 CET	443	50829	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.850888014 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.850919008 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.850985050 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.851125002 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.851139069 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.908222914 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.908287048 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.908365965 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.908565998 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.908575058 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.908586979 CET	50831	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.908591986 CET	443	50831	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.914494991 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.914514065 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.914611101 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.914741039 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.914753914 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.967597008 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.967694998 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.967762947 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.967782021 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.967811108 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.967870951 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.967981100 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.967981100 CET	50830	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.968008995 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.968033075 CET	443	50830	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.970499992 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.970520973 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:54.970597982 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.970834017 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:54.970856905 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.208574057 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.209165096 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.209187984 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.209616899 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.209621906 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.344010115 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.344077110 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.344192982 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.344358921 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.344372034 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.344383955 CET	50832	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.344388008 CET	443	50832	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.347513914 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.347557068 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.347657919 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.347812891 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.347841978 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.597829103 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.598392010 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.598416090 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.598850965 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.598855972 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.609283924 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.611319065 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.611350060 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.611746073 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.611752987 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.659125090 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.659501076 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.659518003 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.659902096 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.659907103 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.721837997 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.722248077 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.722271919 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.722667933 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.722678900 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736458063 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736557961 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736618042 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.736627102 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736664057 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736711025 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.736732006 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736745119 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.736756086 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.736766100 CET	50833	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.736769915 CET	443	50833	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.739505053 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.739541054 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.739643097 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.739774942 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.739789963 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.741101027 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.741281033 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.741339922 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.741377115 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.741395950 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.741408110 CET	50834	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.741413116 CET	443	50834	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.743514061 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.743573904 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:55.743680954 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.743830919 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:55.743849993 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.139379978 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.139411926 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.139452934 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.139524937 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.139796019 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.139810085 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.139825106 CET	50835	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.139831066 CET	443	50835	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.140243053 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.140430927 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.140492916 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.140537977 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.140552044 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.140564919 CET	50836	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.140571117 CET	443	50836	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.143008947 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.143038034 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.143073082 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.143096924 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.143110037 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.143157959 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.143276930 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.143289089 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.143332958 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.143345118 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.275912046 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.276460886 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.276514053 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.276911974 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.276928902 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.407552004 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.407632113 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.407701015 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.407906055 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.407926083 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.407939911 CET	50837	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.407947063 CET	443	50837	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.411127090 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.411158085 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.411253929 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.411428928 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.411446095 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.597367048 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:56.597393036 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:56.597501040 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:56.597790003 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:56.597801924 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:56.876763105 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.877310991 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.877338886 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.877789974 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.877794981 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.878165960 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.878434896 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.878459930 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.878771067 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.878776073 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.887013912 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.887439966 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.887463093 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.887758017 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.887763977 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.893451929 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.893969059 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.893997908 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:56.894423962 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:56.894429922 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.006943941 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.007014990 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.007082939 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.007297039 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.007308006 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.007324934 CET	50841	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.007328987 CET	443	50841	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.010322094 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.010351896 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.010436058 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.010610104 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.010624886 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.011061907 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.011203051 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.011256933 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.011282921 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.011297941 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.011307001 CET	50838	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.011311054 CET	443	50838	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.013237953 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.013259888 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.013329029 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.013472080 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.013487101 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.017424107 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.017486095 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.017539978 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.017551899 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.017606974 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.017646074 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.017982006 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.017993927 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.018003941 CET	50840	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.018009901 CET	443	50840	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.021915913 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.021927118 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.021986961 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.022134066 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.022145987 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.196691036 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.197190046 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.197211981 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.197635889 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.197640896 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.333175898 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.333391905 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.333460093 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.333518982 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.333539009 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.333550930 CET	50842	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.333556890 CET	443	50842	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.336448908 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.336472988 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.336575031 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.336760044 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.336771965 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.491480112 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.491794109 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.491874933 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.491960049 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.491995096 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.492022038 CET	50839	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.492058992 CET	443	50839	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.494585037 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.494627953 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.494741917 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.494896889 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.494914055 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.724980116 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:57.725059986 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:57.728940010 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:57.728948116 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:57.729298115 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:57.737611055 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:57.751632929 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.752016068 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.752032042 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.752579927 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.752584934 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.763623953 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.764002085 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.764014959 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.764396906 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.764400959 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.770925045 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.771205902 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.771220922 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.771538973 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.771543026 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.783356905 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:57.882596970 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.883111954 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.883150101 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.883193970 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.883239031 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.883296013 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.883316994 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.883327007 CET	50844	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.883332968 CET	443	50844	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.886097908 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.886135101 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.886220932 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.886396885 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.886415958 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.893965006 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.894027948 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.894074917 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.894083023 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.894097090 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.894150019 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.894285917 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.894293070 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.894301891 CET	50846	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.894304991 CET	443	50846	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.896388054 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.896420002 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.896496058 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.896650076 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.896666050 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.902812958 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.903012037 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.903074980 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.903110981 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.903120995 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.903167009 CET	50845	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.903172970 CET	443	50845	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.905054092 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.905095100 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:57.905163050 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.905292034 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:57.905308008 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.066982031 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.067512989 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.067537069 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.067972898 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.067979097 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.112236023 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.112267971 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.112289906 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.112354994 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.112366915 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.112416029 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.199428082 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.199486971 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.199563026 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.199774981 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.199785948 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.199795008 CET	50847	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.199803114 CET	443	50847	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.202758074 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.202779055 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.202869892 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.203039885 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.203051090 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.232763052 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.232816935 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.232872963 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.232880116 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.232907057 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.233057022 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.233067989 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.233086109 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.233212948 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.233257055 CET	443	50843	4.175.87.197	192.168.2.5
Oct 31, 2024 21:07:58.233300924 CET	50843	443	192.168.2.5	4.175.87.197
Oct 31, 2024 21:07:58.602941036 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.603373051 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.603410006 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.603801012 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.603809118 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.614566088 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.617427111 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.617454052 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.617883921 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.617887974 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.649398088 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.649811029 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.649830103 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.650238991 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.650243044 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.671282053 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.671674013 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.671690941 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.672065020 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.672070026 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.734342098 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.734368086 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.734405041 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.734426022 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.737832069 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.737832069 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.737832069 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.737843037 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.737901926 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.737987041 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.738117933 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.738168955 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.743855000 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.743901968 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.743948936 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.744103909 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.744117975 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.744127035 CET	50849	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.744131088 CET	443	50849	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.746310949 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.746340990 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.746413946 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.746520042 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.746531963 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.780097008 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.780114889 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.780179024 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.780195951 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.780265093 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.780308008 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.780405998 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.780421019 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.780431032 CET	50850	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.780436039 CET	443	50850	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.782533884 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.782572031 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.782660007 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.782852888 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.782877922 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.806024075 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.806073904 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.806128979 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.806140900 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.806209087 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.806256056 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.806337118 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.806344986 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.806353092 CET	50851	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.806358099 CET	443	50851	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.808371067 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.808399916 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.808495998 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.808578014 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.808584929 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.946696043 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.947184086 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.947199106 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:58.947630882 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:58.947634935 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.048516035 CET	50848	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.048546076 CET	443	50848	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.078821898 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.078847885 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.078896046 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.078916073 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.078953028 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.079197884 CET	50852	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.079205990 CET	443	50852	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.082387924 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.082403898 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.082489014 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.082648039 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.082663059 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.475899935 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.476428032 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.476509094 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.476888895 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.476902962 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.510518074 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.510945082 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.510965109 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.511364937 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.511369944 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.524604082 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.524956942 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.525029898 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.525337934 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.525352001 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.564028025 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.564775944 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.564825058 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.565109015 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.565115929 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.607620001 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.607669115 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.607793093 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.608002901 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.608037949 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.608067036 CET	50853	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.608081102 CET	443	50853	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.611179113 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.611227036 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.611336946 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.611464977 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.611481905 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.645570993 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.645625114 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.645662069 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.645714045 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.645752907 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.645895958 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.645904064 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.645912886 CET	50854	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.645916939 CET	443	50854	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.652570009 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.652609110 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.652690887 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.652846098 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.652862072 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.658842087 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.659123898 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.659197092 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.659238100 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.659259081 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.659303904 CET	50855	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.659336090 CET	443	50855	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.661737919 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.661787987 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.661861897 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.662036896 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.662051916 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.840632915 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.841146946 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.841167927 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.841595888 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.841602087 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.902724028 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.902857065 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.902908087 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.902942896 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.902991056 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.903045893 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.903045893 CET	50856	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.903063059 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.903075933 CET	443	50856	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.905486107 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.905505896 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.905589104 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.905709982 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.905720949 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.972349882 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.972569942 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.972645044 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.973203897 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.973222017 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.973237038 CET	50857	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.973244905 CET	443	50857	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.979671001 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.979722977 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:07:59.979823112 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.980117083 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:07:59.980129004 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.374138117 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.374661922 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.374687910 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.375206947 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.375212908 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.394998074 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.395361900 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.395389080 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.395751953 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.395756006 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.400058985 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.400304079 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.400329113 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.400619030 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.400624037 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.509367943 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.509613037 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.509650946 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.509670019 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.509711027 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.509766102 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.509787083 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.509798050 CET	50858	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.509803057 CET	443	50858	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.512397051 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.512428045 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.512501001 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.512629986 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.512640953 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.531672001 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.531725883 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.531774998 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.532056093 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.532056093 CET	50859	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.532066107 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.532073021 CET	443	50859	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.532851934 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.532881021 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.532929897 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.532943964 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.532963991 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.533015013 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.533107996 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.533121109 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.533132076 CET	50860	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.533138037 CET	443	50860	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.534310102 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.534333944 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.534410954 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.534529924 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.534543037 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.535202980 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.535212040 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.535281897 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.535451889 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.535459042 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.651232958 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.651737928 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.651762009 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.652177095 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.652182102 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.747910023 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.748435020 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.748459101 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.748881102 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.748887062 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.783099890 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.783338070 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.783406973 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.783476114 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.783488035 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.783499002 CET	50861	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.783504963 CET	443	50861	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.786058903 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.786092043 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.786154985 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.786284924 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.786299944 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.883039951 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.883086920 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.883202076 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.883425951 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.883450031 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.883464098 CET	50862	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.883471012 CET	443	50862	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.886012077 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.886042118 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:00.886126041 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.886282921 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:00.886293888 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.288909912 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.289505005 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.289524078 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.289962053 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.289966106 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.292741060 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.292999983 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.293025017 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.293365955 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.293370962 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.422622919 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.422955990 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.423021078 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.423250914 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.423263073 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.423271894 CET	50866	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.423275948 CET	443	50866	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.426187992 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.426230907 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.426322937 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.426481962 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.426496983 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.427212000 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.427440882 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.427493095 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.427532911 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.427557945 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.427570105 CET	50865	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.427575111 CET	443	50865	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.429568052 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.429589033 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.429653883 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.429785013 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.429790974 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.534281015 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.534823895 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.534847975 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.535300016 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.535305023 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.634644032 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.635278940 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.635301113 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.635709047 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.635714054 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.665714979 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.665946960 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.666013002 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.666023016 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.666086912 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.666105032 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.666129112 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.666140079 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.666147947 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.666153908 CET	50867	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.666157007 CET	443	50867	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.668766975 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.668797970 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.668863058 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.669002056 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.669014931 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.765554905 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.765599966 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.765654087 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.765845060 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.765856028 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.765885115 CET	50868	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.765888929 CET	443	50868	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.769083977 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.769124031 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.769191980 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.769359112 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.769377947 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.934830904 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.935429096 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.935457945 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:01.935914993 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:01.935920000 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.073496103 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.073522091 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.073559046 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.073594093 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.073633909 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.073860884 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.073872089 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.073880911 CET	50864	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.073884964 CET	443	50864	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.076700926 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.076734066 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.076817989 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.076977015 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.076991081 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.195736885 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.196274996 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.196301937 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.196724892 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.196732044 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.197182894 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.197432041 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.197460890 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.197738886 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.197746038 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.328556061 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.328619003 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.328685045 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.328784943 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.328784943 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.328952074 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.328974009 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.328999996 CET	50869	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.329005957 CET	443	50869	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.334657907 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.334729910 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.334785938 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.334913015 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.334932089 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.334949970 CET	50870	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.334955931 CET	443	50870	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.335057974 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.335094929 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.335170984 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.335299015 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.335315943 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.337199926 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.337248087 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.337323904 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.337466002 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.337482929 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.418557882 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.419126034 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.419150114 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.419611931 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.419617891 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.530884981 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.531388998 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.531413078 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.531836033 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.531841040 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.550096035 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.550239086 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.550319910 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.550484896 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.550484896 CET	50871	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.550501108 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.550508976 CET	443	50871	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.553014994 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.553086996 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.553195953 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.553373098 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.553404093 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.671483994 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.671506882 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.671540022 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.671619892 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.671684027 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.672049046 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.672049046 CET	50872	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.672063112 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.672071934 CET	443	50872	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.677349091 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.677375078 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.677464962 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.677666903 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.677679062 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.815817118 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.816343069 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.816363096 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.816807032 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.816812992 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.950174093 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.950433969 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.950532913 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.950577021 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.950592995 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.950603008 CET	50873	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.950608015 CET	443	50873	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.953186989 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.953253984 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:02.953380108 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.953507900 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:02.953555107 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.080387115 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.084462881 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.084501982 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.085448027 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.085454941 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.100068092 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.100415945 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.100436926 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.100800991 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.100805044 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.235017061 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.235636950 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.235703945 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.235761881 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.235778093 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.235791922 CET	50874	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.235796928 CET	443	50874	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.238477945 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.238508940 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.238591909 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.238797903 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.238810062 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.335165024 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.335750103 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.335807085 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.336194992 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.336208105 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.345411062 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.345443964 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.345499039 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.345498085 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.345540047 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.345776081 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.345798016 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.345812082 CET	50875	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.345817089 CET	443	50875	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.350123882 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.350152969 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.350240946 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.350348949 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.350362062 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.428365946 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.428865910 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.428879976 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.429306984 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.429310083 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.475224972 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.475393057 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.475480080 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.475533009 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.475573063 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.475603104 CET	50876	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.475617886 CET	443	50876	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.478426933 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.478470087 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.478574038 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.478722095 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.478750944 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.560372114 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.560395002 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.560425997 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.560476065 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.560502052 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.560694933 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.560694933 CET	50877	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.560705900 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.560714006 CET	443	50877	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.563292980 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.563304901 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.563409090 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.563591003 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.563601017 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.700670004 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.701232910 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.701261997 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:03.701702118 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:03.701709032 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.215862989 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.216486931 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.216552019 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.216955900 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.216970921 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.292023897 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.292525053 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.292543888 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.292987108 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.292992115 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.308649063 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.308701038 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.308767080 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.308979988 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.309003115 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.309019089 CET	50878	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.309025049 CET	443	50878	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.311688900 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.311729908 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.311825037 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.311979055 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.312005997 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.348143101 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.348229885 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.348287106 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.348299026 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.348356962 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.348407030 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.348498106 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.348506927 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.348519087 CET	50881	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.348524094 CET	443	50881	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.351021051 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.351073980 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.351157904 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.351294994 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.351310015 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.423419952 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.423707008 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.423779011 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.426532030 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.426546097 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.426556110 CET	50882	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.426561117 CET	443	50882	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.429210901 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.429228067 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.429316998 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.429439068 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.429449081 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.441811085 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.442256927 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.442270994 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.442707062 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.442712069 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.692996025 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.693578005 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.693592072 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.694036961 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.694041014 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.694365978 CET	443	50799	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:04.694430113 CET	50799	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:04.694588900 CET	50799	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:04.694601059 CET	443	50799	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:04.729837894 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.729954958 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.730015039 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.730194092 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.730199099 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.730237961 CET	50880	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.730241060 CET	443	50880	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.733047009 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.733089924 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:04.733158112 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.733288050 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:04.733304024 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.086091042 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.086630106 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.086689949 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.087127924 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.087143898 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.096909046 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.097285032 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.097306967 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.097786903 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.097794056 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.258153915 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.258304119 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.258379936 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.258514881 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.258536100 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.258547068 CET	50884	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.258553028 CET	443	50884	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.259155035 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.259232044 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.259253025 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.259284019 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.259330988 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.259406090 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.260011911 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.260032892 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.260473967 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.260479927 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.260624886 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.260624886 CET	50883	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.260658026 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.260684013 CET	443	50883	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.263125896 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.263144016 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.263202906 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.263341904 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.263353109 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.263899088 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.263937950 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.264005899 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.264105082 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.264121056 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.397377968 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.397408962 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.397444010 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.397490978 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.397527933 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.413918018 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.413929939 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.413965940 CET	50885	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.413971901 CET	443	50885	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.466434002 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.466464996 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.466532946 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.466988087 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.467003107 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.727488041 CET	50890	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:05.727515936 CET	443	50890	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:05.727572918 CET	50890	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:05.729914904 CET	50890	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:05.729929924 CET	443	50890	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:05.767682076 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.768152952 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.768177032 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:05.768605947 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:05.768611908 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.003324032 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.003380060 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.003469944 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.003637075 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.003673077 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.003700018 CET	50879	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.003720045 CET	443	50879	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.006225109 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.006244898 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.006313086 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.006468058 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.006480932 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.012461901 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.012842894 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.012854099 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.013271093 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.013274908 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.144835949 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.144884109 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.144963026 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.145191908 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.145198107 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.145207882 CET	50887	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.145211935 CET	443	50887	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.148324013 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.148366928 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.148448944 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.148618937 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.148633957 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.221571922 CET	443	50809	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:06.221652985 CET	50809	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:06.221792936 CET	50809	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:06.221805096 CET	443	50809	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:06.229499102 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.229909897 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.229931116 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.230390072 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.230396986 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.353683949 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.353740931 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.353800058 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.353971958 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.353985071 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.354001045 CET	50886	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.354006052 CET	443	50886	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.356698990 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.356720924 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.356807947 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.356962919 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.356973886 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.364053011 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.364078045 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.364109039 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.364140034 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.364167929 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.364325047 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.364332914 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.364365101 CET	50889	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.364370108 CET	443	50889	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.366302013 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.366331100 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.366395950 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.366543055 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.366556883 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.379113913 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.379693985 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.379713058 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.380188942 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.380193949 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.508255959 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.508482933 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.508575916 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.508655071 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.508676052 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.508686066 CET	50888	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.508692980 CET	443	50888	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.511737108 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.511748075 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.511848927 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.512008905 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.512017965 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.735496998 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.736362934 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.736380100 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.736838102 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.736843109 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.864209890 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.864319086 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.864411116 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.864655972 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.864672899 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.864681959 CET	50891	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.864686966 CET	443	50891	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.867588043 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.867604971 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.867683887 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.867861986 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.867872000 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.890436888 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.891061068 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.891084909 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:06.891694069 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:06.891705990 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.023339987 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.023391962 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.023477077 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.023744106 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.023744106 CET	50892	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.023755074 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.023762941 CET	443	50892	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.026726007 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.026758909 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.026853085 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.027019024 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.027034044 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.101115942 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.101617098 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.101635933 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.102168083 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.102173090 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.109406948 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.109741926 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.109764099 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.110198021 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.110203981 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.233923912 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.233999968 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.234059095 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.234257936 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.234268904 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.234280109 CET	50893	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.234283924 CET	443	50893	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.237210989 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.237242937 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.237329960 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.237504005 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.237513065 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.241055012 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.241966009 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.242017984 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.242072105 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.242099047 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.242111921 CET	50894	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.242116928 CET	443	50894	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.244123936 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.244162083 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.244227886 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.244343996 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.244359016 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.250344038 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.250694036 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.250705957 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.251133919 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.251137972 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.380383968 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.380556107 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.380733967 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.380748987 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.380753994 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.380763054 CET	50895	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.380768061 CET	443	50895	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.383774996 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.383789062 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.383883953 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.384071112 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.384082079 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.620831013 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.621500969 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.621522903 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.621874094 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.621881008 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.754589081 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.754638910 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.754803896 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.754952908 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.754968882 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.754981041 CET	50896	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.754987955 CET	443	50896	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.757972002 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.758007050 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.758093119 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.758260012 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.758271933 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.789771080 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.790153980 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.790167093 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.790617943 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.790623903 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.924261093 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.924438953 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.924510956 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.924612999 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.924629927 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.924639940 CET	50897	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.924650908 CET	443	50897	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.927660942 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.927675962 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.927753925 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.927920103 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.927932024 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.978364944 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.979053020 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.979070902 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:07.979482889 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:07.979490042 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.011046886 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.011435986 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.011454105 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.011826038 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.011831999 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.109699965 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.109726906 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.109777927 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.109786987 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.109807014 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.109848022 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.109998941 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.110013962 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.110033035 CET	50898	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.110038996 CET	443	50898	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.113719940 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.113751888 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.113831043 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.113985062 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.114000082 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.142868996 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.143876076 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.143898964 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.144303083 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.144309044 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.166893005 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.166948080 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.166996002 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.167175055 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.167190075 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.167200089 CET	50899	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.167206049 CET	443	50899	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.169569016 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.169655085 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.169754028 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.169892073 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.169924974 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.277152061 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.277225018 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.277317047 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.277328968 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.277349949 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.277403116 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.277592897 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.277604103 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.277615070 CET	50900	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.277620077 CET	443	50900	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.280689001 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.280733109 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.280819893 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.281013966 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.281027079 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.498255014 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.498826981 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.498847961 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.499351978 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.499358892 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.629590034 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.629674911 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.629785061 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.630037069 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.630058050 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.630100965 CET	50901	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.630108118 CET	443	50901	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.633017063 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.633095026 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.633203983 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.633368969 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.633399963 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.707664013 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.708219051 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.708228111 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.708745956 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.708756924 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.842401981 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.842473984 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.842576981 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.842617035 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.842631102 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.842673063 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.842854977 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.842864990 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.842875957 CET	50902	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.842880964 CET	443	50902	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.845802069 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.845818996 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.845905066 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.846036911 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.846049070 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.879004955 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.879517078 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.879534960 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.879985094 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.879990101 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.934200048 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.934623957 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.934684038 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:08.935070992 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:08.935084105 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.013596058 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.013672113 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.013741016 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.013958931 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.013977051 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.013988018 CET	50903	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.013993979 CET	443	50903	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.017102003 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.017148018 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.017262936 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.017456055 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.017469883 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.065187931 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.065337896 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.065402985 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.065494061 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.065516949 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.065531969 CET	50904	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.065538883 CET	443	50904	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.067704916 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.067745924 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.067815065 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.067929029 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.067943096 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.365946054 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.366939068 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.367001057 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.367386103 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.367399931 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.519104004 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.519170046 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.519227982 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.519238949 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.519278049 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.519505978 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.519531012 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.519551039 CET	50906	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.519557953 CET	443	50906	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.522586107 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.522614002 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.522696972 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.522876024 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.522885084 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.607218027 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.607738018 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.607783079 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.608226061 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.608232021 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.743987083 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.744056940 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.744122028 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.744313002 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.744327068 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.744338989 CET	50907	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.744344950 CET	443	50907	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.746861935 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.746891975 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.746975899 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.747107983 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.747121096 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.781876087 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.782392025 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.782418966 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.782833099 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.782840014 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.785406113 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.785691023 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.785708904 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.786046028 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.786051989 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.803796053 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.804110050 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.804121971 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.804549932 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.804554939 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.917284966 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.917378902 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.917450905 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.917644978 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.917663097 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.917678118 CET	50908	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.917685032 CET	443	50908	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.920794964 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.920819044 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.920896053 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.921049118 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.921056986 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.934676886 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.934701920 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.934758902 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.934761047 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.934802055 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.934957981 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.934969902 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.934981108 CET	50909	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.934987068 CET	443	50909	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.937362909 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.937397003 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:09.937469006 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.937613010 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:09.937627077 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.291399002 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.291945934 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.291965961 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.292403936 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.292408943 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.417629957 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.417851925 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.417937040 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.418004036 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.418019056 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.418030977 CET	50905	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.418035030 CET	443	50905	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.421056032 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.421082973 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.421192884 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.421360970 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.421372890 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.490596056 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.491019011 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.491028070 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.491460085 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.491465092 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.584084988 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.584388018 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.584469080 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.584492922 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.584498882 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.584511042 CET	50910	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.584516048 CET	443	50910	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.586900949 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.586930037 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.586994886 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.587121964 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.587136030 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.623260975 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.623289108 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.623348951 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.623444080 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.623655081 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.623671055 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.623681068 CET	50911	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.623686075 CET	443	50911	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.626380920 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.626410007 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.626493931 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.626684904 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.626698971 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.727615118 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.728389025 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.728404045 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.728861094 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.728866100 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.865974903 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.865994930 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.866048098 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.866058111 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.866076946 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.866123915 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.866323948 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.866333961 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.866343021 CET	50912	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.866348028 CET	443	50912	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.869117975 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.869146109 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:10.869276047 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.869385004 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:10.869399071 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.165222883 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.165663004 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.165692091 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.166152000 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.166157007 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.270478964 CET	50918	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:11.270514011 CET	443	50918	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:11.270620108 CET	50918	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:11.270804882 CET	50918	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:11.270821095 CET	443	50918	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:11.333085060 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.333172083 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.333240032 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.333250046 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.333389997 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.333447933 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.333503962 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.333518028 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.333527088 CET	50914	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.333532095 CET	443	50914	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.336177111 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.336215019 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.336287975 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.336424112 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.336437941 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.345622063 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.346024036 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.346055031 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.346460104 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.346470118 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.369513035 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.369869947 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.369890928 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.370251894 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.370259047 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.475703955 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.475825071 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.475893974 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.476022959 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.476044893 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.476057053 CET	50915	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.476063013 CET	443	50915	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.478986025 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.479068041 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.479157925 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.479350090 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.479383945 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.501374006 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.501677990 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.501751900 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.501841068 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.501863956 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.501880884 CET	50916	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.501887083 CET	443	50916	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.504034042 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.504065037 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.504144907 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.504280090 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:11.504291058 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:11.992295027 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.010181904 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.010196924 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.024296999 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.024306059 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.056591988 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.075716972 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.075763941 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.076215029 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.076232910 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.110186100 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.151922941 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.151947975 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.179550886 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.179559946 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.236917019 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.247961998 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.247997999 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.248481035 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.248487949 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.326905966 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.326997995 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.327071905 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.327249050 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.327249050 CET	50919	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.327266932 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.327275991 CET	443	50919	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.330358028 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.330400944 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.330475092 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.330641031 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.330653906 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.380206108 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.380270958 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.380343914 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.380359888 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.380414963 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.380425930 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.380470037 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.380614042 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.380629063 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.380641937 CET	50920	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.380646944 CET	443	50920	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.383188963 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.383225918 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.383321047 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.383507013 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.383513927 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.471205950 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.471307039 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.471388102 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.471580029 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.471580029 CET	50917	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.471596003 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.471604109 CET	443	50917	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.474574089 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.474622965 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.474704027 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.474839926 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.474854946 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.661652088 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.661689043 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.661756039 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.661775112 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.661853075 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.661900997 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.662035942 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.662053108 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.662064075 CET	50913	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.662070036 CET	443	50913	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.664885998 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.664927006 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:12.665005922 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.665180922 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:12.665198088 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.101641893 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.102696896 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.102742910 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.103182077 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.103199959 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.142208099 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.144349098 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.144375086 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.144817114 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.144823074 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.219841003 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.220359087 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.220398903 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.220798969 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.220804930 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.360515118 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.360598087 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.360621929 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.360692024 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.360764027 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.360830069 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.360830069 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.362297058 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.362374067 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.362385988 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.362433910 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.362478971 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.362478971 CET	50922	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.362528086 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.362555981 CET	443	50922	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.364166975 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.364192009 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.364249945 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.364255905 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.364305019 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.364406109 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.364428997 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.364443064 CET	50923	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.364449978 CET	443	50923	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.365545988 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.365588903 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.365696907 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.365817070 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.365825891 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.366269112 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.366357088 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.366403103 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.366460085 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.366575003 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.366592884 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.366595984 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.366611004 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.366980076 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.366986990 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.410594940 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.411391020 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.411406994 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.411784887 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.411797047 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.479662895 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.479691029 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.479713917 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.479773045 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.479795933 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.479809999 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.479844093 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.599212885 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.599294901 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.599349022 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.599383116 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.599384069 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.599468946 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.599553108 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.599601984 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.599632978 CET	50924	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.599648952 CET	443	50924	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.602531910 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.602585077 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.602675915 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.602823973 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.602838993 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.654818058 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.654864073 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.654932022 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.654958010 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.655133963 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.655149937 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.655164003 CET	50921	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.655165911 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.655179977 CET	443	50921	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.657545090 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.657588959 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:13.657676935 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.657779932 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:13.657788992 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.007492065 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.007523060 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.007594109 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.007601976 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.007647991 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.007883072 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.007898092 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.007910013 CET	50925	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.007915020 CET	443	50925	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.010778904 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.010823011 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.010914087 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.011087894 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.011109114 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.106439114 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.106848001 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.106873035 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.107302904 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.107310057 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.118824959 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.119146109 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.119162083 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.119503975 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.119508982 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.237581015 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.237612009 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.237689972 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.237700939 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.237849951 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.237899065 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.237981081 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.237994909 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.238014936 CET	50926	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.238020897 CET	443	50926	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.241096020 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.241164923 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.241246939 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.241416931 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.241442919 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.258615971 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.259916067 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.260003090 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.260025978 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.260036945 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.260046005 CET	50927	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.260050058 CET	443	50927	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.262140989 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.262161016 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.262224913 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.262351036 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.262362957 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.370795965 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.371339083 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.371356964 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.371824980 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.371830940 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.414846897 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.415220022 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.415257931 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.415612936 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.415622950 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.505911112 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.506172895 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.506236076 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.506316900 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.506316900 CET	50928	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.506325960 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.506336927 CET	443	50928	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.508927107 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.508946896 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.509018898 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.509149075 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.509160995 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.546060085 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.546258926 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.546426058 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.546426058 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.546426058 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.548573017 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.548589945 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.548661947 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.548764944 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.548778057 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.771886110 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.772505999 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.772530079 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.772883892 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.772891045 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.846914053 CET	50929	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.846956968 CET	443	50929	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.906802893 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.906945944 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.907094002 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.907974005 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.907974005 CET	50930	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.907989979 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.908000946 CET	443	50930	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.911201000 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.911251068 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:14.911351919 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.911468029 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:14.911482096 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.024002075 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.024602890 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.024631023 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.025115013 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.025120020 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.158328056 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.158509016 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.158586025 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.158757925 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.158757925 CET	50932	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.158776999 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.158783913 CET	443	50932	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.257349014 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.257863045 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.257895947 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.258292913 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.258304119 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.292990923 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.293451071 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.293464899 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.293850899 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.293855906 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.360901117 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.361641884 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.361709118 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.362004042 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.362021923 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.389158964 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.389241934 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.389306068 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.389502048 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.389502048 CET	50933	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.389519930 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.389540911 CET	443	50933	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.686798096 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.686942101 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.687092066 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.687136889 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.687150955 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.687167883 CET	50934	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.687172890 CET	443	50934	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.695399046 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.695436954 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.695485115 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.695508957 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.695566893 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.695733070 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.695733070 CET	50931	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.695765972 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.695791960 CET	443	50931	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.819092035 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.819633961 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.819675922 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.820096016 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.820108891 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.949611902 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.949681997 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.949783087 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.949949026 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.949970007 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:15.950021029 CET	50935	443	192.168.2.5	13.107.246.45
Oct 31, 2024 21:08:15.950037003 CET	443	50935	13.107.246.45	192.168.2.5
Oct 31, 2024 21:08:22.724395037 CET	443	50890	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:22.724543095 CET	50890	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:22.724819899 CET	50890	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:22.724838972 CET	443	50890	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:22.725531101 CET	50936	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:22.725555897 CET	443	50936	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:22.725670099 CET	50936	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:22.725902081 CET	50936	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:22.725915909 CET	443	50936	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:28.291898966 CET	443	50918	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:28.292138100 CET	50918	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:28.292211056 CET	50918	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:28.292226076 CET	443	50918	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:28.292776108 CET	50937	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:28.292809010 CET	443	50937	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:28.292881966 CET	50937	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:28.293104887 CET	50937	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:28.293122053 CET	443	50937	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:34.935280085 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:34.935340881 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:34.935451031 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:34.935813904 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:34.935827017 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:35.830188990 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:35.830610991 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:35.830641031 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:35.830967903 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:35.831816912 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:35.831883907 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:35.872018099 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:40.506289005 CET	443	50936	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:40.506479979 CET	50936	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:40.506695032 CET	50936	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:40.506715059 CET	443	50936	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:45.280198097 CET	443	50937	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:45.280314922 CET	50937	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:45.280592918 CET	50937	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:08:45.280613899 CET	443	50937	93.157.106.19	192.168.2.5
Oct 31, 2024 21:08:46.127789021 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:46.127860069 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:08:46.128034115 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:46.566416025 CET	50939	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:08:46.566445112 CET	443	50939	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:10.534018040 CET	50941	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:10.534044981 CET	443	50941	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:10.534085035 CET	50942	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:10.534126997 CET	443	50942	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:10.534173012 CET	50941	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:10.534229994 CET	50942	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:10.540540934 CET	50942	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:10.540556908 CET	443	50942	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:10.540745974 CET	50941	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:10.540760994 CET	443	50941	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.547215939 CET	443	50941	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.547287941 CET	50941	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.547442913 CET	50941	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.547460079 CET	443	50941	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.548423052 CET	50943	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.548444033 CET	443	50943	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.548527956 CET	50943	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.548773050 CET	50943	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.548784971 CET	443	50943	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.577884912 CET	443	50942	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.577941895 CET	50942	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.578033924 CET	50942	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.578049898 CET	443	50942	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.578329086 CET	50944	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.578363895 CET	443	50944	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:27.578502893 CET	50944	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.578711033 CET	50944	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:27.578722954 CET	443	50944	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:34.986910105 CET	50945	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:09:34.986948013 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:34.987010956 CET	50945	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:09:34.987236977 CET	50945	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:09:34.987250090 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:35.859589100 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:35.859885931 CET	50945	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:09:35.859908104 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:35.860198975 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:35.860532045 CET	50945	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:09:35.860594988 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:35.906850100 CET	50945	443	192.168.2.5	142.250.185.164
Oct 31, 2024 21:09:44.563783884 CET	443	50943	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:44.566278934 CET	50943	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:44.566477060 CET	50943	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:44.566490889 CET	443	50943	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:44.576035023 CET	443	50944	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:44.578342915 CET	50944	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:44.578640938 CET	50944	443	192.168.2.5	93.157.106.19
Oct 31, 2024 21:09:44.578651905 CET	443	50944	93.157.106.19	192.168.2.5
Oct 31, 2024 21:09:45.871221066 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:45.871272087 CET	443	50945	142.250.185.164	192.168.2.5
Oct 31, 2024 21:09:45.871385098 CET	50945	443	192.168.2.5	142.250.185.164

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 21:07:17.498677969 CET	60658	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:30.431911945 CET	64902	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:30.432090044 CET	59542	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:30.440414906 CET	53	59095	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:30.453876019 CET	53	52749	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:30.471822977 CET	53	64902	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:30.478032112 CET	53	59542	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:31.676080942 CET	53	60649	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:34.762087107 CET	53	53549	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:34.862804890 CET	58138	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:34.862880945 CET	56428	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:07:34.870440006 CET	53	58138	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:34.870645046 CET	53	56428	1.1.1.1	192.168.2.5
Oct 31, 2024 21:07:35.718441963 CET	53	58844	1.1.1.1	192.168.2.5
Oct 31, 2024 21:08:30.106993914 CET	53	59936	1.1.1.1	192.168.2.5
Oct 31, 2024 21:08:34.925390959 CET	58779	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:08:34.925638914 CET	50129	53	192.168.2.5	1.1.1.1
Oct 31, 2024 21:08:34.933345079 CET	53	58779	1.1.1.1	192.168.2.5
Oct 31, 2024 21:08:34.933805943 CET	53	50129	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 21:07:17.498677969 CET	192.168.2.5	1.1.1.1	0x358b	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:30.431911945 CET	192.168.2.5	1.1.1.1	0x7ec8	Standard query (0)	email.gov.in.indianarmy.pl	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:30.432090044 CET	192.168.2.5	1.1.1.1	0x3af1	Standard query (0)	email.gov.in.indianarmy.pl	65	IN (0x0001)	false
Oct 31, 2024 21:07:34.862804890 CET	192.168.2.5	1.1.1.1	0xff5c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:34.862880945 CET	192.168.2.5	1.1.1.1	0xb9ff	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 21:08:34.925390959 CET	192.168.2.5	1.1.1.1	0x8385	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:08:34.925638914 CET	192.168.2.5	1.1.1.1	0xb599	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 21:07:17.508356094 CET	1.1.1.1	192.168.2.5	0x358b	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 21:07:18.178275108 CET	1.1.1.1	192.168.2.5	0xd322	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:18.178275108 CET	1.1.1.1	192.168.2.5	0xd322	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:30.471822977 CET	1.1.1.1	192.168.2.5	0x7ec8	No error (0)	email.gov.in.indianarmy.pl		93.157.106.19	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:34.870440006 CET	1.1.1.1	192.168.2.5	0xff5c	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:07:34.870645046 CET	1.1.1.1	192.168.2.5	0xb9ff	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 21:08:34.933345079 CET	1.1.1.1	192.168.2.5	0x8385	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 31, 2024 21:08:34.933805943 CET	1.1.1.1	192.168.2.5	0xb599	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

armmf.adobe.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:12 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 20:07:12 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=160710 Date: Thu, 31 Oct 2024 20:07:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 20:07:14 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=160766 Date: Thu, 31 Oct 2024 20:07:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 20:07:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:18 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:18 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:18 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 93e60446-901e-00a0-4f32-2a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200718Z-159b85dff8f9g9g4hC1DFW9n700000000270000000000th7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:18 UTC	15890	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 20:07:18 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <
2024-10-31 20:07:18 UTC	16384	IN	Data Raw: 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d Data Ascii: 0820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E=
2024-10-31 20:07:18 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 Data Ascii: <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8"
2024-10-31 20:07:18 UTC	16384	IN	Data Raw: 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e Data Ascii: _False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-10-31 20:07:19 UTC	16384	IN	Data Raw: 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e Data Ascii: 2" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Clean
2024-10-31 20:07:19 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-10-31 20:07:19 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 Data Ascii: > </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-10-31 20:07:19 UTC	16384	IN	Data Raw: 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 Data Ascii: <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-10-31 20:07:19 UTC	16384	IN	Data Raw: 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=lNzDyt+dmpdpar1&MD=RbVxNMDU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 20:07:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 33b15f83-c3b2-44dc-bc3a-c0391ac937fe MS-RequestId: e55fbcf9-90ca-44b9-8535-ca6fc5b18ace MS-CV: 9ZlbA7JiIEOt74n4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 20:07:18 GMT Connection: close Content-Length: 24490
2024-10-31 20:07:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-31 20:07:19 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	96.7.168.138	443	7260	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:19 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-10-31 20:07:19 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Thu, 31 Oct 2024 20:07:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:20 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200720Z-16849878b78fssff8btnns3b140000000ab0000000006y7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:20 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:20 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200720Z-16849878b78qfbkc5yywmsbg0c00000009rg000000006u40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:20 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:20 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:20 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:20 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 57c488e2-201e-0051-02c8-2b7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200720Z-159b85dff8f46f6ghC1DFW1x1s00000000pg00000000d2fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:20 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: a3cdd038-101e-0046-1366-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200720Z-15b8d89586fmc8ck21zz2rtg1w00000007cg0000000016fk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:21 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 070d1cb7-b01e-0084-2b6b-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200721Z-159b85dff8fdjprfhC1DFWuqh000000000ug00000000fw8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:21 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200721Z-15b8d89586fmc8ck21zz2rtg1w000000078000000000c73m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:21 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:22 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3443e7a9-f01e-0085-6a6b-2a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200722Z-15b8d89586f8nxpt6ys645x5v00000000b9g00000000akwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:22 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:21 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: fc05dcd0-301e-0052-2d91-2a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200721Z-159b85dff8f7lrfphC1DFWfw0800000001z0000000006cvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:22 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:22 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 2923fc04-801e-0047-2d8c-2a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200722Z-159b85dff8fvjwrdhC1DFWymhn00000000qg0000000024nb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:22 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:22 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:22 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 80c74b81-d01e-00a1-16c0-2a35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200722Z-159b85dff8fc5h75hC1DFWntr800000001f000000000fhmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:22 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:22 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200722Z-16849878b786lft2mu9uftf3y40000000bag000000005szn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:22 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200722Z-16849878b78fkwcjkpn19c5dsn0000000920000000008qfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:22 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f0c209fa-601e-00ab-740d-2966f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200723Z-17c5cb586f62tvgppdugz3gsrn00000001000000000030g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:23 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 1d60da59-401e-002a-5eef-2ac62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200723Z-15b8d89586f5s5nz3ffrgxn5ac0000000arg00000000b1q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:23 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200723Z-15b8d89586fpccrmgpemqdqe5800000005000000000009p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:23 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89d7e9f4-d01e-0066-46a8-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200723Z-16849878b787wpl5wqkt5731b40000000atg000000009srs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:23 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 601805a2-a01e-000d-7265-2ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200723Z-17c5cb586f659tsm88uwcmn6s400000002e000000000f0tk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:23 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200723Z-16849878b7867ttgfbpnfxt44s00000009v000000000kwek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:24 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:24 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200724Z-16849878b78j5kdg3dndgqw0vg0000000bpg00000000phkg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:24 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:24 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200724Z-16849878b786lft2mu9uftf3y40000000bag000000005t33 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:24 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bf2855ec-b01e-0084-57b7-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200724Z-16849878b78q9m8bqvwuva4svc00000008n0000000002ke2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:24 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 352708b7-401e-0064-6563-2b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200724Z-17c5cb586f6f8m6jcqp9ufve6n00000000pg00000000bz5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:24 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200724Z-16849878b78x44pv2mpb0dd37w0000000250000000009rgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:25 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 227affc5-c01e-0046-7627-272db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200725Z-17c5cb586f69w69mgazyf263an000000096000000000pc5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:25 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:25 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c990e8a6-c01e-0034-078c-2a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200725Z-159b85dff8f6x4jjhC1DFW7uqg00000001m000000000n966 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:25 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:25 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200725Z-16849878b78qfbkc5yywmsbg0c00000009s00000000054tn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:25 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:25 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: bb81791c-801e-00ac-6687-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200725Z-159b85dff8f9mtxchC1DFWf9vg00000001dg0000000020eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:25 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:25 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200725Z-16849878b78bjkl8dpep89pbgg00000008qg00000000fbzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:26 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200726Z-16849878b78wc6ln1zsrz6q9w800000009r0000000009tha x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:26 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:26 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200726Z-16849878b78km6fmmkbenhx76n00000009e00000000037st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:26 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:26 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:26 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200726Z-16849878b78x6gn56mgecg60qc0000000brg00000000ue72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:26 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:26 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200726Z-16849878b78bjkl8dpep89pbgg00000008pg00000000n07t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:26 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 3601e2f9-501e-0064-27bd-2a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200726Z-159b85dff8f5bl2qhC1DFWs6cn00000001z000000000fmbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:27 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: daa440d4-101e-0028-4cca-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200727Z-159b85dff8fx9jp8hC1DFWp25400000001vg00000000g2zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:27 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: c8fc43da-c01e-008d-5b71-2a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200727Z-15b8d89586f4zwgbgswvrvz4vs0000000bg0000000007pdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:27 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:27 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: a5807169-a01e-0032-6664-271949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200727Z-17c5cb586f62tvgppdugz3gsrn00000000y0000000007kk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:27 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:27 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:27 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5cde4d2e-001e-0046-6764-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200727Z-159b85dff8f7lrfphC1DFWfw0800000001u000000000kfmz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:27 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:27 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: f3394f62-601e-0070-07f3-2aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200727Z-16849878b785jrf8dn0d2rczaw0000000b700000000079re x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:28 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:28 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: fa89f893-901e-00ac-46b8-2ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200728Z-17c5cb586f6d5d4vksgckxyn1c00000000p000000000cp5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:28 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:28 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200728Z-16849878b78zqkvcwgr6h55x9n00000009b000000000y95n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:28 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:28 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200728Z-16849878b786fl7gm2qg4r5y700000000a5000000000zk31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:28 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:28 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:28 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 82dd15c7-901e-0064-46c7-2ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200728Z-159b85dff8f46f6ghC1DFW1x1s00000000r00000000092wg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:28 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:28 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:28 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200728Z-16849878b7898p5f6vryaqvp580000000ay0000000000z4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:28 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:28 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:29 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200729Z-16849878b787bfsh7zgp804my400000008qg00000000whqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:29 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:29 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200729Z-16849878b78wc6ln1zsrz6q9w800000009p000000000mpsy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:29 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:29 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3dbc68f5-901e-0067-66a2-2bb5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200729Z-15b8d89586fmhjx6a8nf3qm53c00000003y0000000004d04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:29 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:29 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200729Z-16849878b78qf2gleqhwczd21s0000000a5g00000000mz2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:29 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200730Z-16849878b787wpl5wqkt5731b40000000an0000000012f6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:30 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200730Z-16849878b78wc6ln1zsrz6q9w800000009ng00000000npce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:30 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:30 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200730Z-16849878b78qwx7pmw9x5fub1c0000000880000000000vu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:30 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 12c3b8a8-601e-0084-2933-2a6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200730Z-159b85dff8fsgrl7hC1DFWadan00000002xg0000000009tu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:30 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bb89066a-001e-008d-7656-2ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200731Z-15b8d89586f5s5nz3ffrgxn5ac0000000atg000000006uwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:31 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 11b83051-201e-005d-1b95-2bafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200731Z-17c5cb586f69p7mmw593w958p400000001a000000000ad4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:31 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 64f5c2f9-201e-000c-22cd-2a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200731Z-159b85dff8f2qnk7hC1DFWwa2400000000gg00000000bd7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:31 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:31 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 1048e377-301e-0000-11d0-2aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200731Z-17c5cb586f62tvgppdugz3gsrn00000000zg000000003ukq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:31 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:31 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:31 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200731Z-16849878b78km6fmmkbenhx76n00000009e000000000387q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:31 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:32 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:32 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200732Z-16849878b7867ttgfbpnfxt44s00000009t000000000v7wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:32 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:32 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200732Z-16849878b78tg5n42kspfr0x480000000a3g000000002cpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:32 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200732Z-16849878b786fl7gm2qg4r5y700000000aa000000000b5fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:32 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:32 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e9a0cb1f-301e-0096-7e58-2be71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200732Z-159b85dff8f7lrfphC1DFWfw0800000001yg000000007mrt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:32 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:32 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200732Z-16849878b78wc6ln1zsrz6q9w800000009kg00000000x4he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:33 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: e138989b-f01e-003f-497f-2ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200733Z-159b85dff8fprglthC1DFW8zcg00000002000000000050a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:33 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 78dfd7f1-001e-0034-02ca-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200733Z-16849878b78p8hrf1se7fucxk80000000as00000000115ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:33 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:33 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 08cfea9b-401e-0016-38cc-2a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200733Z-159b85dff8f9mtxchC1DFWf9vg00000001c0000000006z96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:33 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:33 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf07d5f0-e01e-0020-6ed9-2ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200733Z-159b85dff8fbvrz4hC1DFW730c00000001600000000067m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:34 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:34 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 927ac0b1-901e-0083-7fcc-2abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200734Z-17c5cb586f6fqqst87nqkbsx1c00000008n0000000001md3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:34 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:34 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200734Z-16849878b785dznd7xpawq9gcn0000000bcg00000000edp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:34 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 0dbc9083-501e-0035-4fdd-2ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200734Z-15b8d89586fbmg6qpd9yf8zhm000000004wg00000000e0u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:34 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200734Z-16849878b785dznd7xpawq9gcn0000000bcg00000000edqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 951c16f0-d01e-002b-20ad-2a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200734Z-159b85dff8fj6b6xhC1DFW8qdg00000001wg000000007gu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:34 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 37a25f3a-c01e-00ad-392a-2ba2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200735Z-159b85dff8fprglthC1DFW8zcg00000001yg000000008fwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:35 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:35 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200735Z-16849878b78zqkvcwgr6h55x9n00000009gg0000000073yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:35 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:35 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:35 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200735Z-16849878b78bjkl8dpep89pbgg00000008r000000000d6hq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:36 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:36 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d871491f-101e-0046-2593-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200736Z-159b85dff8f7svrvhC1DFWth2s00000001zg00000000bhcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:36 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:37 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200737Z-16849878b78g2m84h2v9sta29000000008zg000000005q85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	50737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:36 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:36 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200736Z-16849878b78km6fmmkbenhx76n00000009bg00000000dv55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:37 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	50738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:37 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200737Z-15b8d89586fqj7k5h9gbd8vs980000000b3000000000n5zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:37 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:37 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:37 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 59ab8492-a01e-0070-01b9-2b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200737Z-15b8d89586fzcfbd8we4bvhqds0000000500000000005r6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:37 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:37 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:37 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200737Z-16849878b7898p5f6vryaqvp580000000arg00000000w5ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:37 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	50740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:37 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:37 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: fe72e82f-401e-008c-6e5e-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200737Z-17c5cb586f6fqqst87nqkbsx1c00000008gg00000000a7cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:37 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	50741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:37 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:37 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200737Z-16849878b78p49s6zkwt11bbkn00000009s0000000002z0c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:38 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	50742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:37 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8964bec7-001e-005a-3570-2ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200738Z-17c5cb586f626sn8grcgm1gf8000000008c000000000nhb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	50743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:38 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 888f89be-701e-0001-21d9-2ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200738Z-15b8d89586f4zwgbgswvrvz4vs0000000bg0000000007q20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:38 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	50744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:38 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:38 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: a349b1bc-a01e-0021-20bc-2a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200738Z-159b85dff8f7lrfphC1DFWfw0800000001y0000000008bx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	50745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:38 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 1a403a11-c01e-0082-051c-27af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200738Z-17c5cb586f64sw5wh0dfzbdtvw000000028g000000003h9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	50747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:38 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:39 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:38 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 5c8c4e1d-601e-0002-3bca-2aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200738Z-159b85dff8fdjprfhC1DFWuqh000000000z0000000001pw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	50746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:38 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:38 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200738Z-16849878b78qg9mlz11wgn0wcc00000009p0000000005kfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	50748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:39 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 8f4dae4f-901e-008f-19cb-2767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200739Z-17c5cb586f626sn8grcgm1gf8000000008fg00000000ap5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	50750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:39 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: a3e027ec-201e-0071-5daf-2aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200740Z-17c5cb586f62vrfquq10qybcuw000000033g0000000002r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	50751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:39 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:39 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 24b2bddd-501e-0016-07ca-2a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200739Z-16849878b78bjkl8dpep89pbgg00000008rg00000000betq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:40 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	50752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:39 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:40 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cdf7bdf1-501e-0029-3f94-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200740Z-17c5cb586f6p5pndayxh2uxv5400000001hg00000000mzsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:40 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	50753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:40 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:40 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 832ef365-c01e-0066-6e55-2ba1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200740Z-17c5cb586f6f8m6jcqp9ufve6n00000000kg00000000k4wg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:40 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	50749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:40 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:40 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 41496f62-601e-00ab-428f-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200740Z-159b85dff8fj5jwshC1DFW3rgc00000001z0000000000x9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	50754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:41 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200741Z-17c5cb586f672xmrz843mf85fn00000008zg00000000axq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:41 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	50756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:41 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: eb0745eb-f01e-003c-6cca-2a8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200741Z-17c5cb586f69p7mmw593w958p4000000018g00000000ee0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	50758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:41 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200741Z-16849878b78nzcqcd7bed2fb6n00000002f000000000bes7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	50755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:41 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:41 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8cda5ddf-101e-0046-65bc-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200741Z-17c5cb586f6f98jx9q4y7udcaw00000001fg00000000g80h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:41 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	50757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:41 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 40c56fb5-c01e-00a2-740e-2b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200741Z-15b8d89586fhl2qtatrz3vfkf00000000gd0000000009z0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	50759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:41 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200741Z-16849878b78smng4k6nq15r6s40000000bn0000000000qxs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	50761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:42 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:42 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200742Z-16849878b78xblwksrnkakc08w00000009400000000123vt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:42 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	50760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:42 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:42 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200742Z-16849878b78qfbkc5yywmsbg0c00000009qg00000000bhxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:42 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	50763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:42 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:42 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 93439f28-801e-00ac-63f6-2afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200742Z-16849878b78qfbkc5yywmsbg0c00000009k000000000xzfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:42 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	50762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:42 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:42 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200742Z-16849878b78z2wx67pvzz63kdg00000008qg0000000031u9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:42 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	50764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:42 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b92dace7-601e-0097-311b-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200742Z-15b8d89586f989rkwt13xern5400000005bg000000005w7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	50765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:42 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:43 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:43 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ea4f12d2-001e-0066-30b1-2a561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200743Z-159b85dff8f6x4jjhC1DFW7uqg00000001m000000000n9tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:43 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	50767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:43 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:43 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200743Z-16849878b7867ttgfbpnfxt44s00000009x000000000acge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:43 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	50766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:43 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:43 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:43 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 8cc202a4-801e-0067-03db-2afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200743Z-159b85dff8fdh9tvhC1DFW50vs000000021000000000e7h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:43 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	50769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:43 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200743Z-16849878b78j7llf5vkyvvcehs0000000b3g00000000c41w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	50770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:43 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-17c5cb586f67hfgj2durhqcxk800000008y000000000dh8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	50771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:43 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-16849878b78qf2gleqhwczd21s0000000a6000000000gsy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:44 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	50773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:44 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-16849878b78j7llf5vkyvvcehs0000000b1g00000000nmt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	50772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:44 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:44 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-16849878b78q9m8bqvwuva4svc00000008n0000000002mte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:44 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	50774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:44 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-16849878b78tg5n42kspfr0x4800000009z000000000r1d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	50776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:44 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 07be293a-201e-00aa-396b-2b3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-17c5cb586f6l54tjt07kuq05pc000000012g000000006599 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	50777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:44 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:44 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 774e7d8d-d01e-007a-55ae-2af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200744Z-159b85dff8f9mtxchC1DFWf9vg00000001d0000000003mge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	50779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:45 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200745Z-16849878b78smng4k6nq15r6s40000000bh000000000dhmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	50780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:45 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 3adfa8d1-b01e-0084-6ce8-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200745Z-15b8d89586fst84kttks1s2css00000003q0000000009sx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	50781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:45 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200745Z-16849878b78zqkvcwgr6h55x9n00000009dg00000000mys8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	50783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:45 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:45 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: a453eede-301e-0033-02d5-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200745Z-17c5cb586f64sw5wh0dfzbdtvw0000000290000000001m0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	50782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:45 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:45 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200745Z-16849878b78j5kdg3dndgqw0vg0000000bm0000000010nc4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:45 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	50785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:46 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:46 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200746Z-16849878b78qfbkc5yywmsbg0c00000009p000000000hvn4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:46 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	50786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:46 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:46 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ff2e7302-c01e-0014-403f-2ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200746Z-17c5cb586f6d5d4vksgckxyn1c00000000t0000000001myh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:46 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	50787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:46 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:46 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200746Z-16849878b78x44pv2mpb0dd37w000000024000000000dvwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:46 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	50788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:46 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:46 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200746Z-16849878b785jrf8dn0d2rczaw0000000b2g00000000v8az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:46 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	50789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:46 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200746Z-17c5cb586f6r59nt4rzfbx40ys000000026g00000000ef2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	50790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:47 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200747Z-16849878b785dznd7xpawq9gcn0000000bd000000000dcwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:47 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	50791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:47 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200747Z-16849878b78p8hrf1se7fucxk80000000ax000000000auv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:47 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	50792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:47 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 8d96526f-101e-0046-3aec-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200747Z-15b8d89586fpccrmgpemqdqe5800000004xg000000006c3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:47 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	50793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:47 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4fba8623-501e-0064-4a33-2b1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200747Z-15b8d89586fhl2qtatrz3vfkf00000000gcg00000000anny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:47 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	50794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: d36ad09b-701e-0098-4cde-2a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200747Z-17c5cb586f69p7mmw593w958p400000001ag000000008wkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	50795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 38943712-901e-002a-666e-2a7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200747Z-159b85dff8fbvrz4hC1DFW730c000000014000000000cw4h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	50796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:47 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:48 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 692fb0cd-a01e-0070-2974-2a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200748Z-15b8d89586fxdh48ft0acdbg4400000003r000000000g8cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	50800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:48 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:48 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: d6a1c2a7-101e-0079-31ea-2a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200748Z-16849878b78p49s6zkwt11bbkn00000009qg000000009z7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	50797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:48 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:48 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 419dffea-201e-003c-451f-2830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200748Z-15b8d89586fmhjx6a8nf3qm53c00000003zg000000000nep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	50801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:48 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 23d501f6-c01e-0079-39b4-2ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200748Z-17c5cb586f62tvgppdugz3gsrn00000000ug00000000hs07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	50798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:48 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:48 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200748Z-16849878b78fkwcjkpn19c5dsn00000008xg00000000x0rz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	50802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:48 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200748Z-16849878b78wc6ln1zsrz6q9w800000009rg000000007puc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	50805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:49 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:49 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 8e66950d-f01e-0003-769c-274453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200749Z-16849878b78j7llf5vkyvvcehs0000000b2g00000000fsuv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:49 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	50806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:49 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:49 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200749Z-16849878b78fssff8btnns3b140000000a9g00000000ddd5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:49 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	50808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:49 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:49 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200749Z-16849878b78hh85qc40uyr8sc80000000a9000000000ft34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:49 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	50804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:49 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:49 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200749Z-16849878b78g2m84h2v9sta29000000008tg00000000z44d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:49 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	50807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:50 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:50 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:50 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200750Z-16849878b78fhxrnedubv5byks000000088g00000000u4k7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 20:07:50 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	50810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:50 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:50 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:50 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7526ce6b-701e-003e-79c0-2a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200750Z-159b85dff8fc5h75hC1DFWntr800000001n00000000026r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:50 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	50813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:50 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 2073a42b-101e-0065-1a58-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200750Z-16849878b78smng4k6nq15r6s40000000bf000000000pss7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:51 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	50812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 20:07:50 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 20:07:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 20:07:50 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b2907cd8-f01e-0096-39f3-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T200750Z-16849878b78x6gn56mgecg60qc0000000bs000000000rzqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 20:07:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Acrobat.exePID: 4436, Parent PID: 1028

General

Target ID:	0
Start time:	16:07:03
Start date:	31/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\pCUif26EC3.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 6632, Parent PID: 4436

General

Target ID:	2
Start time:	16:07:04
Start date:	31/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 7260, Parent PID: 6632

General

Target ID:	4
Start time:	16:07:04
Start date:	31/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2076 --field-trial-handle=1644,i,9350794974525276448,17629122597262964351,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7964, Parent PID: 5436

General

Target ID:	8
Start time:	16:07:28
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://email.gov.in.indianarmy.pl/service/home/?auth=co&id=29238&filename=INDIAN%20Armed%20Forces%20And%20Agencies%20Report&charset=UTF-8"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5136, Parent PID: 7964

General

Target ID:	9
Start time:	16:07:29
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2660 --field-trial-handle=2516,i,3251236118383752928,15854534322080960164,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report pCUif26EC3.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Errors

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\567f19b0-b8cf-4a3d-a25a-5e54493acfff.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241031200708Z-153.bmp

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6048

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Windows Analysis Report
pCUif26EC3.pdf