Edit tour

Windows Analysis Report
https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g

Overview

General Information

Sample URL:	https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g
Analysis ID:	1546438
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1988,i,417364347229219285,4724628485071449306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-31T22:20:26.212579+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49767	104.21.12.31	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49792 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: qltuh.lyraevega.com to https://qltuh.everestpeak.top/space-robot/?pl=chii7gh3guyta8xggnqdyq&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5zedv-h0_6_5whdjebnc5w&exp=1730409918

Source: Network traffic

Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49767 -> 104.21.12.31:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g HTTP/1.1Host: qltuh.lyraevega.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/style.css?v=5 HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/trls.js HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/corner.png HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/main.js?v=3 HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared-js/assets/static-pl.js?v=5 HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/trls.js HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/corner.png HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/main.js?v=3 HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared-js/assets/static-pl.js?v=5 HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&sub_id=&appspot=&d=https%3A%2F%2Fcdnstatic.everestpeak.top&timeout=1800&tb=true&nrid=8ef3ad173d6b44f8905002ffdf1d0e14 HTTP/1.1Host: cdnstatic.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qltuh.everestpeak.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/config.js?id=CHiI7Gh3GUyTa8XGgNqDyQ HTTP/1.1Host: cdnstatic.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qltuh.everestpeak.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8
Source: global traffic	HTTP traffic detected: GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&sub_id=&appspot=&d=https%3A%2F%2Fcdnstatic.everestpeak.top&timeout=1800&tb=true&nrid=8ef3ad173d6b44f8905002ffdf1d0e14 HTTP/1.1Host: cdnstatic.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8
Source: global traffic	HTTP traffic detected: GET /ps/config.js?id=CHiI7Gh3GUyTa8XGgNqDyQ HTTP/1.1Host: cdnstatic.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/favicon.ico HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw-4f2862d8ae3425bbeba0457736992b20.js HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /space-robot/assets/favicon.ico HTTP/1.1Host: qltuh.everestpeak.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: qltuh.lyraevega.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: qltuh.everestpeak.top
Source: global traffic	DNS traffic detected: DNS query: cdnstatic.everestpeak.top

Source: chromecache_71.2.dr, chromecache_74.2.dr	String found in binary or memory: https://js.streampsh.top
Source: chromecache_71.2.dr, chromecache_74.2.dr	String found in binary or memory: https://mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49792 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/29@12/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1988,i,417364347229219285,4724628485071449306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1988,i,417364347229219285,4724628485071449306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdnstatic.everestpeak.top	104.21.12.31	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
qltuh.lyraevega.com	188.114.97.3	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
qltuh.everestpeak.top	172.67.131.236	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.37	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://cdnstatic.everestpeak.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&sub_id=&appspot=&d=https%3A%2F%2Fcdnstatic.everestpeak.top&timeout=1800&tb=true&nrid=8ef3ad173d6b44f8905002ffdf1d0e14	false	unknown
https://qltuh.everestpeak.top/shared-js/assets/static-pl.js?v=5	false	unknown
https://qltuh.everestpeak.top/space-robot/assets/style.css?v=5	false	unknown
https://qltuh.everestpeak.top/space-robot/assets/main.js?v=3	false	unknown
https://qltuh.everestpeak.top/space-robot/assets/corner.png	false	unknown
https://qltuh.everestpeak.top/space-robot/assets/trls.js	false	unknown
https://cdnstatic.everestpeak.top/ps/config.js?id=CHiI7Gh3GUyTa8XGgNqDyQ	false	unknown
https://qltuh.everestpeak.top/space-robot/assets/favicon.ico	false	unknown
https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g	false	unknown
https://qltuh.everestpeak.top/sw-4f2862d8ae3425bbeba0457736992b20.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://js.streampsh.top	chromecache_71.2.dr, chromecache_74.2.dr	false		unknown
https://mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-	chromecache_71.2.dr, chromecache_74.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.131.236	qltuh.everestpeak.top	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	qltuh.lyraevega.com	European Union	13335	CLOUDFLARENETUS	false
104.21.12.31	cdnstatic.everestpeak.top	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546438
Start date and time:	2024-10-31 22:19:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/29@12/6

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.185.174, 66.102.1.84, 34.104.35.123, 216.58.206.67, 4.245.163.56, 142.250.185.99, 217.20.57.37, 192.229.221.95, 142.250.184.195, 20.3.187.198, 13.95.31.18, 216.58.206.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38231)
Category:	dropped
Size (bytes):	38286
Entropy (8bit):	5.232495836642869
Encrypted:	false
SSDEEP:	768:s/XYybWGO7ksZus7aKXhFTSjDH3WQZZfuaNNHRzxHs67ZoL3udKoW3gbUFuOt:5GO55/CXS3udKoWyQ/
MD5:	0541B823DFAF39162EF84CF075C9951B
SHA1:	E0934726455558CC1A59823EFADA9651E33AAFAA
SHA-256:	21F1D62F222007068C793F0947D98F4CCB7C1595ADB68EFEB783390FDD8B5522
SHA-512:	41DCFB4E2D91A5F8B7CC482E25A8A4ED5BCD1202D7C34B9AB0B258D1599BD669479A101024AF30F6A90EB09E3C7817A6565D5F9978C6FB31897EF63E5D5BD3A5
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("@firebase/app-compat"),require("@firebase/app")):"function"==typeof define&&define.amd?define(["@firebase/app-compat","@firebase/app"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase,e.firebase.INTERNAL.modularAPIs)}(this,function(Wt,Ut){"use strict";try{!(function(){function e(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var i,t=e(Wt);function n(){try{return"object"==typeof indexedDB}catch(e){return!1}}class o extends Error{constructor(e,t,n){super(t),this.code=e,this.customData=n,this.name="FirebaseError",Object.setPrototypeOf(this,o.prototype),Error.captureStackTrace&&Error.captureStackTrace(this,a.prototype.create)}}class a{constructor(e,t,n){this.service=e,this.serviceName=t,this.errors=n}create(e,...t){var i,n=t[0]\|\|{},a=`${this.service}/${e}`,r=this.errors[e],r=r?(i=n,r.replace(s,(e,t)=>{var n=i[t];return null!=n?String(n):`<${t}?>`})):"Error",r=`${this.serviceName}

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	6.239402873001218
Encrypted:	false
SSDEEP:	6:6v/lhPkM14wKkVCcRnzitP6m9Lg9hCoiPYtRByAV66ykkaOOW2EULLm6Ogxp:6v/7s+9KkVZRzsRat3ByokaREkS6Ogf
MD5:	F66C38FA2CD7C50BD1989D41DA28FB80
SHA1:	E1DE333ECA72647F3C1831083FE678CFA8FE9EAB
SHA-256:	3059BE4046E0315AD1C0D1CB163D9DAAF759BDF16E906E908842FAC07E5608A2
SHA-512:	F9249F19037C19502E5CE15540DD49662E221DBE1D47DA5756D5D7ED304CC73DA73EEEAA28EC48449FFDDF52350B88A2F14FE65E0D867E5324B0CC27C5DEE3B7
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/space-robot/assets/corner.png
Preview:	.PNG........IHDR...,...,.....)Z.3...<PLTE..........................................................e!J.....tRNS...2..U... .w..D%.0k......IDAT8..7..@.....2....+..3z*...GMn..........w.......x..4.7....7.7.l.l.l.......=.=.A.M.M.M.M.M.n.o.o.orm.}.+.\...J.=OC....Ku.R.Z..#.<.d.......IEND.B`.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28368)
Category:	downloaded
Size (bytes):	28949
Entropy (8bit):	5.285633915745323
Encrypted:	false
SSDEEP:	768:dASlCDOW3GZSQaujrg/AfjpNBLJ8EElOZbwrgmJHNS55/:VW3tujrlESkNu/
MD5:	9900403B65514FAD7DF39A4E788A6E45
SHA1:	75F9BA061EF4E72BB23528C700F2A11C56D637E9
SHA-256:	A202B2051EA9810CD9BA592B3F9418A89E2062F5C185E29E288080B28EB64FE5
SHA-512:	6C24F5DBA5409574433E7438B7BE890202132302F22CC79EB4446F29E02AFD054DAE6E79FCE02C66444C76BA8F857658C4DE4B8379E5CBAE54C847BDD54A3FC6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase=t()}(this,function(){"use strict";const r=function(t){const r=[];let n=0;for(let a=0;a<t.length;a++){let e=t.charCodeAt(a);e<128?r[n++]=e:(e<2048?r[n++]=e>>6\|192:(55296==(64512&e)&&a+1<t.length&&56320==(64512&t.charCodeAt(a+1))?(e=65536+((1023&e)<<10)+(1023&t.charCodeAt(++a)),r[n++]=e>>18\|240,r[n++]=e>>12&63\|128):r[n++]=e>>12\|224,r[n++]=e>>6&63\|128),r[n++]=63&e\|128)}return r},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encodeByteArray(r,e){if(!Array.isArray(r))throw Error("encodeByteArray takes an

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Category:	downloaded
Size (bytes):	12109
Entropy (8bit):	5.777686292982531
Encrypted:	false
SSDEEP:	192:NHNDLDb+t62tb53R0XrQhUIjW4X1HAgcaMK2d2gWA9lfWCTXLhDD20:rnDb+/nUrQKaX1gg7bk9T1W8XLhDq0
MD5:	7F5C725B2C23B9687FA08D162A17427A
SHA1:	94973F1227871750D2EF13A367CE691F1A062527
SHA-256:	C9611CE748D6C7C99D3F374A0B687DB2E2428FC5EC9C4E7AE71B2E4305AC60E3
SHA-512:	FF6B09BB88B07E436E4E77F41867A8EF7C939CAD567F622F538A0264F58F2A6EC92BDC74072924623CAB8C8439C23CF7718B037F50E61D8051163B4E9A9F6025
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/space-robot/assets/trls.js
Preview:	var translation = {.. source: {.. title: 'Click "Allow"',.. text1: 'Press the "Allow" button to verify you\'re human!'.. },.. en: {.. title: 'Click "Allow"',.. text1: 'Press the "Allow" button to verify you\'re human!'.. },.. ar: {.. title: ".... .....",.. text1: '.... ... "......" ...... .... ... ....... .....!'.. },.. az: {.. title: '".caz. verin" d.ym.sini bas.n',.. text1: '.nsan oldu.unuzu t.sdiql.m.k ...n ".caz. verin" d.ym.sini bas.n!'.. },.. be: {.. title: '......... "........."',.. text1: '......... ...... ".........", ... ..........., ... .. .......!'.. },.. bn: {.. title: "...... ... ..... ....",.. text1: ".... .... .... .. ....... .... ....

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 44, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	300
Entropy (8bit):	6.239402873001218
Encrypted:	false
SSDEEP:	6:6v/lhPkM14wKkVCcRnzitP6m9Lg9hCoiPYtRByAV66ykkaOOW2EULLm6Ogxp:6v/7s+9KkVZRzsRat3ByokaREkS6Ogf
MD5:	F66C38FA2CD7C50BD1989D41DA28FB80
SHA1:	E1DE333ECA72647F3C1831083FE678CFA8FE9EAB
SHA-256:	3059BE4046E0315AD1C0D1CB163D9DAAF759BDF16E906E908842FAC07E5608A2
SHA-512:	F9249F19037C19502E5CE15540DD49662E221DBE1D47DA5756D5D7ED304CC73DA73EEEAA28EC48449FFDDF52350B88A2F14FE65E0D867E5324B0CC27C5DEE3B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....)Z.3...<PLTE..........................................................e!J.....tRNS...2..U... .w..D%.0k......IDAT8..7..@.....2....+..3z*...GMn..........w.......x..4.7....7.7.l.l.l.......=.=.A.M.M.M.M.M.n.o.o.orm.}.+.\...J.=OC....Ku.R.Z..#.<.d.......IEND.B`.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5617), with no line terminators
Category:	downloaded
Size (bytes):	5617
Entropy (8bit):	5.52733573957217
Encrypted:	false
SSDEEP:	96:ERqLLl1qLLv65l1v6HFWeDl4nATqKYTPhdqSEHdtxb6nwe3x/jp6KLLC:EoBMOj0lJD+pTPFsxbYn0
MD5:	3F8B4F9C0860BA334198908EC7E50842
SHA1:	EF024AF47DA914DABA41AF97EFDFD1D9B3AB1142
SHA-256:	6C70CB99E9F0F3CBD2A6B551D16AB45B9081B826E9F152910863CC2F9DD618A4
SHA-512:	0BE5441F298C9597E91898F158D7A130FC9E673816F699AB24F567F6FBB25893DAEBC5986C672236865A7E7F6CE7593A002F3D6A8830F069950F670C9129A14D
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/space-robot/assets/style.css?v=5
Preview:	.qIk5bq,body,html{height:100%;width:100%}#body,#rShadow{position:absolute;left:0;right:0}#body,#rBodyBox,#rShadow{position:absolute}#body,#rHeadBox{top:0}.d8UNtF,.fXc8jQ{text-align:center}@font-face{font-family:Roboto;font-style:normal;font-weight:300;src:local("Roboto Light"),local("Roboto-Light"),url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fBBc4.woff2) format("woff2");unicode-range:u+0000-00ff,u+0131,u+0152-0153,u+02bb-02bc,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2122,u+2191,u+2193,u+2212,u+2215,u+feff,u+fffd}@font-face{font-family:Roboto;font-style:normal;font-weight:300;src:local("Roboto Light"),local("Roboto-Light"),url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format("woff2");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Roboto;font-style:normal;font-weight:500;src:local("Roboto Medium"),local("Roboto-Medium"),url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) form

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (455)
Category:	downloaded
Size (bytes):	9094
Entropy (8bit):	5.103312735189065
Encrypted:	false
SSDEEP:	96:Us4KfC8PLvPBN4wmDmjNkyRrGLpWI53/SpVay8SQUDtqrV7wbGX8Dygj/1Uj3e8W:UbmC8Ls+NZrJm/C/1GGyuS7eall1Q
MD5:	E2DF78D35A44450E8A96A49DD0FE9BF1
SHA1:	B3FE92604035B0C3557D9D53460DB5421E097822
SHA-256:	EA35952692A0C3BFAF8C1EAA7DC27EBE8FDF888A57D9E5C72FCC07958DCE0210
SHA-512:	C123204FBAA05BB1BF864017CC204571B613E9905E87AED55973F154A012E8FF4C58C77505BCA3A6F7E798E1E31F8B01AC744B9D0FC0E1AEEA75CD4E1EF7652B
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918
Preview:	<!DOCTYPE html>..<html lang="en">.<head>.<meta content="text/html; charset=utf-8" http-equiv="Content-Type"/>.<meta content="f44d21508bd5bb1ec12d623b9e5f3510" name="pushsdk"/>.<title id="title">9c93ab72-b0cb-4706-96bf-9f5be09e507a</title>.<meta content="IE=edge" http-equiv="X-UA-Compatible"/>.<meta content="width=device-width,height=device-height,initial-scale=1,minimum-scale=1" name="viewport"/>.<script src="assets/trls.js"></script>.<link as="style" href="assets/style.css?v=5" rel="stylesheet"/>.<link href="assets/apple-touch-icon.png" rel="apple-touch-icon" sizes="180x180"/>.<link href="assets/favicon-32x32.png" rel="icon" sizes="32x32" type="image/png"/>.<link href="assets/favicon-16x16.png" rel="icon" sizes="16x16" type="image/png"/>.<link color="#5bbad5" href="assets/safari-pinned-tab.svg" rel="mask-icon"/>.<link href="assets/favicon.ico" rel="shortcut icon"/>.<meta content="#da532c" name="msapplication-TileColor"/>.<meta content="#ffffff" name="theme-color"/>.</head>.<body>.<div

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.511933203100695
Encrypted:	false
SSDEEP:	192:jknWjGFyZuTCExIPorGAuCYPbKp7RBQOgdhO/bMVQMDbMY8660Z:jSAwGiYkBHeh2+DbT86
MD5:	FED120E82F1746F2A152D787A4B9B141
SHA1:	85D5E67815554F3BF782C55A88B10C298A10144F
SHA-256:	0E7E89635C2278AAC17966D17CB41C8A725AB5D0D0D5A40B41F7FA5169440059
SHA-512:	7F26C89058FD37B3B795A856051F40F397ABEF353DF3A9EBEA8DA32CC0ADE2A29408956A006F1B51BFF94DB77E91E465ADC851DC717B4B6A0D06A19DFC178732
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/space-robot/assets/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$......................................................................................................................................................................433....................................................................................................................................................................................s_\..............................................................................................................wt.ta^.nYV.o[X.vc`.}jh..mj..nk.{hf.vc`.p\Y.mYV.q]Z..nl.............................................................................................................................nZW.p\Y..\|y.............................................................xeb.iTQ.\|jg.................................................................................................ub_.q]Z..........................................................................................q

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Category:	dropped
Size (bytes):	12109
Entropy (8bit):	5.777686292982531
Encrypted:	false
SSDEEP:	192:NHNDLDb+t62tb53R0XrQhUIjW4X1HAgcaMK2d2gWA9lfWCTXLhDD20:rnDb+/nUrQKaX1gg7bk9T1W8XLhDq0
MD5:	7F5C725B2C23B9687FA08D162A17427A
SHA1:	94973F1227871750D2EF13A367CE691F1A062527
SHA-256:	C9611CE748D6C7C99D3F374A0B687DB2E2428FC5EC9C4E7AE71B2E4305AC60E3
SHA-512:	FF6B09BB88B07E436E4E77F41867A8EF7C939CAD567F622F538A0264F58F2A6EC92BDC74072924623CAB8C8439C23CF7718B037F50E61D8051163B4E9A9F6025
Malicious:	false
Reputation:	low
Preview:	var translation = {.. source: {.. title: 'Click "Allow"',.. text1: 'Press the "Allow" button to verify you\'re human!'.. },.. en: {.. title: 'Click "Allow"',.. text1: 'Press the "Allow" button to verify you\'re human!'.. },.. ar: {.. title: ".... .....",.. text1: '.... ... "......" ...... .... ... ....... .....!'.. },.. az: {.. title: '".caz. verin" d.ym.sini bas.n',.. text1: '.nsan oldu.unuzu t.sdiql.m.k ...n ".caz. verin" d.ym.sini bas.n!'.. },.. be: {.. title: '......... "........."',.. text1: '......... ...... ".........", ... ..........., ... .. .......!'.. },.. bn: {.. title: "...... ... ..... ....",.. text1: ".... .... .... .. ....... .... ....

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2745)
Category:	dropped
Size (bytes):	4693
Entropy (8bit):	5.153709142756514
Encrypted:	false
SSDEEP:	96:U1WCSrr39Lo8LLLoyfqQYl80j7ynJjHtYB2jQAs2z+ru5IIYFDJzm:odSrpLo2LLoyfU57nzm
MD5:	01C51ED0A287B5DDF6793778CFA3A72C
SHA1:	EBD2613CD806B8E080F556B0D254C0F7A6C738A9
SHA-256:	4C0224D810D4F0AC617DDD4AB215E0084AEEC230D8944780A129C0046DE2DAD5
SHA-512:	8C68C6FCBECC333E4B8421756314B2FB35F579B218843007AF41638767B0529688B255C4E985DCE9943D77CB537067896AB298B4A9EAAD5E0687D6ABC5342175
Malicious:	false
Reputation:	low
Preview:	document.addEventListener("DOMContentLoaded",(function(){I(),setInterval((function(){I()}),5e3);var e=document.getElementById("armLeft"),t=document.getElementById("armRight"),s=document.getElementById("eyeNormal"),i=document.getElementById("eyeBlink"),d=document.getElementById("rHeadBox"),m=document.getElementById("mouth1"),a=document.getElementById("mouth2"),n=document.getElementById("mouth3"),c=document.getElementById("rBodyBox"),o=!1;setInterval((function(){o?(c.classList.remove("rAnim"),d.classList.remove("rAnim"),o=!1):(c.classList.add("rAnim"),d.classList.add("rAnim"),o=!0)}),4e3),setInterval((function(){setTimeout((function(){s.classList.add("hide"),i.classList.add("showBlock")}),0),setTimeout((function(){s.classList.remove("hide"),i.classList.remove("showBlock")}),300)}),5e3);var l,r,L=0;function u(){clearInterval(l),clearTimeout(r),L=0,document.getElementById("mouth1").classList.remove("hide"),document.getElementById("mouth2").classList.remove("hide"),document.getElementById("

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38231)
Category:	downloaded
Size (bytes):	38286
Entropy (8bit):	5.232495836642869
Encrypted:	false
SSDEEP:	768:s/XYybWGO7ksZus7aKXhFTSjDH3WQZZfuaNNHRzxHs67ZoL3udKoW3gbUFuOt:5GO55/CXS3udKoWyQ/
MD5:	0541B823DFAF39162EF84CF075C9951B
SHA1:	E0934726455558CC1A59823EFADA9651E33AAFAA
SHA-256:	21F1D62F222007068C793F0947D98F4CCB7C1595ADB68EFEB783390FDD8B5522
SHA-512:	41DCFB4E2D91A5F8B7CC482E25A8A4ED5BCD1202D7C34B9AB0B258D1599BD669479A101024AF30F6A90EB09E3C7817A6565D5F9978C6FB31897EF63E5D5BD3A5
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("@firebase/app-compat"),require("@firebase/app")):"function"==typeof define&&define.amd?define(["@firebase/app-compat","@firebase/app"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase,e.firebase.INTERNAL.modularAPIs)}(this,function(Wt,Ut){"use strict";try{!(function(){function e(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var i,t=e(Wt);function n(){try{return"object"==typeof indexedDB}catch(e){return!1}}class o extends Error{constructor(e,t,n){super(t),this.code=e,this.customData=n,this.name="FirebaseError",Object.setPrototypeOf(this,o.prototype),Error.captureStackTrace&&Error.captureStackTrace(this,a.prototype.create)}}class a{constructor(e,t,n){this.service=e,this.serviceName=t,this.errors=n}create(e,...t){var i,n=t[0]\|\|{},a=`${this.service}/${e}`,r=this.errors[e],r=r?(i=n,r.replace(s,(e,t)=>{var n=i[t];return null!=n?String(n):`<${t}?>`})):"Error",r=`${this.serviceName}

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3784
Entropy (8bit):	4.960091823523444
Encrypted:	false
SSDEEP:	48:lILn6EjyUjdvf9BSX6qXQXtXHWOXBrHkOQRRmXHW3Ad8Rnjx9Npwj0HNDGZ:lID3eU5PSqqgdXWORrHsKCXGQHFGZ
MD5:	EA5B776364EAEC7FFBAE46FD05328F35
SHA1:	C5266E08FE813C9CE737555828475B6C1AB509B7
SHA-256:	7388E3F47B4385A2F508FBA43E6988E40554D6A72B44D249CE6756AD17A23825
SHA-512:	FED5D7DFA6508A4DFB2C0608E842CDADEC62453D12C48615F2D86C44C09E975B0C40E9EE01DC05D59B799A8B709E6F9F3E2AEC6FA9D04643DD952F898E90BAF8
Malicious:	false
Reputation:	low
Preview:	(function () {.. // Redirect When JS not loaded.... // Uncomment to use regular redirect without ssp.. // const trafficBack = 'https://mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-{reason}';.. // const trafficBackTrack = false;.... // Uncomment to use redirect through ssp.. const trafficBack = '{js_domain}/ps/tb?reason={reason}&sm={sm}&sub_id={sub_id}&click_id={click_id}&nrid={nrid}';.. const trafficBackTrack = true;.. const defaultTrafficBack = 'https://www.bing.com/news';.... // Options for workarounds.. const edg = true;.. const fullscreen = true;.. const defaultTimeout = 1800;.. // ServiceWorkerJS fixed name (only for appspot landings).. const sw = '';.... // Use CDN static for JS.. const useCdnStatic = true;.. const cdnStaticPrefix = 'cdnstatic';.. const defaultJSDomain = 'https://js.streampsh.top';.... function getParameterByName(name, url = window.location.href) {.. name = name.replace(/[\[\]]/g, '\\$&');.. let regex = n

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28368)
Category:	dropped
Size (bytes):	28949
Entropy (8bit):	5.285633915745323
Encrypted:	false
SSDEEP:	768:dASlCDOW3GZSQaujrg/AfjpNBLJ8EElOZbwrgmJHNS55/:VW3tujrlESkNu/
MD5:	9900403B65514FAD7DF39A4E788A6E45
SHA1:	75F9BA061EF4E72BB23528C700F2A11C56D637E9
SHA-256:	A202B2051EA9810CD9BA592B3F9418A89E2062F5C185E29E288080B28EB64FE5
SHA-512:	6C24F5DBA5409574433E7438B7BE890202132302F22CC79EB4446F29E02AFD054DAE6E79FCE02C66444C76BA8F857658C4DE4B8379E5CBAE54C847BDD54A3FC6
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase=t()}(this,function(){"use strict";const r=function(t){const r=[];let n=0;for(let a=0;a<t.length;a++){let e=t.charCodeAt(a);e<128?r[n++]=e:(e<2048?r[n++]=e>>6\|192:(55296==(64512&e)&&a+1<t.length&&56320==(64512&t.charCodeAt(a+1))?(e=65536+((1023&e)<<10)+(1023&t.charCodeAt(++a)),r[n++]=e>>18\|240,r[n++]=e>>12&63\|128):r[n++]=e>>12\|224,r[n++]=e>>6&63\|128),r[n++]=63&e\|128)}return r},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encodeByteArray(r,e){if(!Array.isArray(r))throw Error("encodeByteArray takes an

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2745)
Category:	downloaded
Size (bytes):	4693
Entropy (8bit):	5.153709142756514
Encrypted:	false
SSDEEP:	96:U1WCSrr39Lo8LLLoyfqQYl80j7ynJjHtYB2jQAs2z+ru5IIYFDJzm:odSrpLo2LLoyfU57nzm
MD5:	01C51ED0A287B5DDF6793778CFA3A72C
SHA1:	EBD2613CD806B8E080F556B0D254C0F7A6C738A9
SHA-256:	4C0224D810D4F0AC617DDD4AB215E0084AEEC230D8944780A129C0046DE2DAD5
SHA-512:	8C68C6FCBECC333E4B8421756314B2FB35F579B218843007AF41638767B0529688B255C4E985DCE9943D77CB537067896AB298B4A9EAAD5E0687D6ABC5342175
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/space-robot/assets/main.js?v=3
Preview:	document.addEventListener("DOMContentLoaded",(function(){I(),setInterval((function(){I()}),5e3);var e=document.getElementById("armLeft"),t=document.getElementById("armRight"),s=document.getElementById("eyeNormal"),i=document.getElementById("eyeBlink"),d=document.getElementById("rHeadBox"),m=document.getElementById("mouth1"),a=document.getElementById("mouth2"),n=document.getElementById("mouth3"),c=document.getElementById("rBodyBox"),o=!1;setInterval((function(){o?(c.classList.remove("rAnim"),d.classList.remove("rAnim"),o=!1):(c.classList.add("rAnim"),d.classList.add("rAnim"),o=!0)}),4e3),setInterval((function(){setTimeout((function(){s.classList.add("hide"),i.classList.add("showBlock")}),0),setTimeout((function(){s.classList.remove("hide"),i.classList.remove("showBlock")}),300)}),5e3);var l,r,L=0;function u(){clearInterval(l),clearTimeout(r),L=0,document.getElementById("mouth1").classList.remove("hide"),document.getElementById("mouth2").classList.remove("hide"),document.getElementById("

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3784
Entropy (8bit):	4.960091823523444
Encrypted:	false
SSDEEP:	48:lILn6EjyUjdvf9BSX6qXQXtXHWOXBrHkOQRRmXHW3Ad8Rnjx9Npwj0HNDGZ:lID3eU5PSqqgdXWORrHsKCXGQHFGZ
MD5:	EA5B776364EAEC7FFBAE46FD05328F35
SHA1:	C5266E08FE813C9CE737555828475B6C1AB509B7
SHA-256:	7388E3F47B4385A2F508FBA43E6988E40554D6A72B44D249CE6756AD17A23825
SHA-512:	FED5D7DFA6508A4DFB2C0608E842CDADEC62453D12C48615F2D86C44C09E975B0C40E9EE01DC05D59B799A8B709E6F9F3E2AEC6FA9D04643DD952F898E90BAF8
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/shared-js/assets/static-pl.js?v=5
Preview:	(function () {.. // Redirect When JS not loaded.... // Uncomment to use regular redirect without ssp.. // const trafficBack = 'https://mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-{reason}';.. // const trafficBackTrack = false;.... // Uncomment to use redirect through ssp.. const trafficBack = '{js_domain}/ps/tb?reason={reason}&sm={sm}&sub_id={sub_id}&click_id={click_id}&nrid={nrid}';.. const trafficBackTrack = true;.. const defaultTrafficBack = 'https://www.bing.com/news';.... // Options for workarounds.. const edg = true;.. const fullscreen = true;.. const defaultTimeout = 1800;.. // ServiceWorkerJS fixed name (only for appspot landings).. const sw = '';.... // Use CDN static for JS.. const useCdnStatic = true;.. const cdnStaticPrefix = 'cdnstatic';.. const defaultJSDomain = 'https://js.streampsh.top';.... function getParameterByName(name, url = window.location.href) {.. name = name.replace(/[\[\]]/g, '\\$&');.. let regex = n

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2388
Entropy (8bit):	5.044309925990593
Encrypted:	false
SSDEEP:	48:LlyYsa8cyz4b5vUyCko6LbtS7H3DTL3eh7Zi/Dy3HIiCMlqR:ByYsG5vUGovz3wye4iRMR
MD5:	49508DBCF13E774B503D1F325A9E23A8
SHA1:	58C7F866FD667A39829A7332421FDD0FE5FA4ABA
SHA-256:	0ECC84BAC9EB09D66938A1C1ACAE6006A05402866BB3C7081477A00FA8A7683B
SHA-512:	4F80E1822FB1AEF4387F0DD2787522CD3E011CE20AD09DD9E7A0AAC0DD791F3C5104584A35215952017EC18185409EAD77F2A3CA903A6036AE0BD9DC932B6E27
Malicious:	false
Reputation:	low
URL:	https://qltuh.everestpeak.top/sw-4f2862d8ae3425bbeba0457736992b20.js
Preview:	/. v. 1.0.5. */.'use strict';..self.addEventListener('push', (event) => {. var push = JSON.parse(event.data.text());.. if (push.data.hasOwnProperty('pixel') && validURL(push.data.pixel)) {. var pixelUrl = push.data.pixel;. var getTrackingPixelPromise = getTrackingPixel(pixelUrl);. var showPushNotificationPromise = showPushNotification(push);. var promiseChain = Promise.all([. getTrackingPixelPromise,. showPushNotificationPromise. ]);. event.waitUntil(promiseChain);. }. else {. event.waitUntil(showPushNotification(push));. };.});..function showPushNotification(push) {. var tag = push.data.tag;. if (tag && tag.startsWith('service_message')) {. return;. }.. var title = push.data.title;.. var notificationOptions = {. body: push.data.body,. icon: push.data.icon,. badge: push.data.badge,. data: {. click_action: push.data.click_action,. },. image: push.data.attachment_url,. tag: push.data.tag,. requireInteraction: (pu

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.511933203100695
Encrypted:	false
SSDEEP:	192:jknWjGFyZuTCExIPorGAuCYPbKp7RBQOgdhO/bMVQMDbMY8660Z:jSAwGiYkBHeh2+DbT86
MD5:	FED120E82F1746F2A152D787A4B9B141
SHA1:	85D5E67815554F3BF782C55A88B10C298A10144F
SHA-256:	0E7E89635C2278AAC17966D17CB41C8A725AB5D0D0D5A40B41F7FA5169440059
SHA-512:	7F26C89058FD37B3B795A856051F40F397ABEF353DF3A9EBEA8DA32CC0ADE2A29408956A006F1B51BFF94DB77E91E465ADC851DC717B4B6A0D06A19DFC178732
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$......................................................................................................................................................................433....................................................................................................................................................................................s_\..............................................................................................................wt.ta^.nYV.o[X.vc`.}jh..mj..nk.{hf.vc`.p\Y.mYV.q]Z..nl.............................................................................................................................nZW.p\Y..\|y.............................................................xeb.iTQ.\|jg.................................................................................................ub_.q]Z..........................................................................................q

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-31T22:20:26.212579+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.4	49767	104.21.12.31	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 22:20:04.169843912 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 22:20:13.779247999 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 22:20:16.717830896 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:16.717865944 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:16.717941999 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:16.718245029 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:16.718264103 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:16.718329906 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:16.718648911 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:16.718664885 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:16.718935966 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:16.718949080 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.327750921 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.328102112 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.328115940 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.328959942 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.329025984 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330115080 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330152988 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330172062 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.330265045 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330275059 CET	443	49735	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.330285072 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330319881 CET	49735	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330590963 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330619097 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.330677986 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330881119 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.330892086 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.332253933 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.332473040 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.332492113 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.333338976 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.333400011 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.333790064 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.333839893 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.333877087 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.333930016 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.333936930 CET	443	49736	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.333954096 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.333981037 CET	49736	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.334240913 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.334280968 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.334340096 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.334520102 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.334537983 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.940628052 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.941432953 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:17.982244015 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:17.982245922 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.281529903 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.281558990 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.281837940 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.281852961 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.282471895 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.282536030 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.282753944 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.282825947 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.290422916 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.290478945 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.290914059 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.290970087 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.292124033 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.292133093 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.342036963 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.342056990 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:18.342076063 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:18.386940002 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:19.521635056 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:19.521699905 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:19.521861076 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:19.538466930 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:19.538496971 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:19.538666964 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:19.540544033 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:19.540558100 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:19.773169041 CET	49740	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:19.773194075 CET	443	49740	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:19.774846077 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:19.774861097 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:19.775052071 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:19.775856972 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:19.775871992 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:19.785588980 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:19.785634041 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:19.785722017 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:19.785981894 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:19.785995007 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.390609980 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.390710115 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.397051096 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.397068977 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.397253036 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.403331041 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.411784887 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.411811113 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.412874937 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.412934065 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.438234091 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.438318014 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.438380957 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.438462019 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.438471079 CET	443	49743	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.438530922 CET	49743	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.439300060 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.439347982 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.439529896 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.439825058 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:20.439843893 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:20.451344013 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.504591942 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.547342062 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.640523911 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:20.640794992 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:20.640813112 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:20.642448902 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:20.642533064 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:20.647905111 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:20.648005009 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:20.701531887 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:20.701548100 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:20.746454954 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:20.750444889 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.750490904 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.750719070 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.756983042 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.756998062 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.757010937 CET	49741	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.757018089 CET	443	49741	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.804322004 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.804352045 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:20.804450989 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.805210114 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:20.805222034 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:21.054101944 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.054332972 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.054347992 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.055214882 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.055272102 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.250236988 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.250349045 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.250498056 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.250516891 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.294409990 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.654620886 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.654675007 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.654720068 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.654757977 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.654771090 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.654783010 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.654814959 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.655276060 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.655328035 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.655332088 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.655359983 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.655390024 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.655406952 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.655457973 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.655503988 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.656263113 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:21.656335115 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:21.657789946 CET	49744	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.657805920 CET	443	49744	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.662442923 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:21.662455082 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:21.662655115 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:21.708324909 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:21.757342100 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:21.758690119 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.758723974 CET	443	49746	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.758869886 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.759203911 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.759216070 CET	443	49746	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.760013103 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.760097027 CET	443	49747	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.760165930 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.760674000 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.760709047 CET	443	49747	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.761630058 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.761666059 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.761723042 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.762176991 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.762190104 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.762934923 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.762959957 CET	443	49749	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.763086081 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.763529062 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:21.763542891 CET	443	49749	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:21.799335957 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:22.164433956 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:22.164479017 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:22.164539099 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:22.165533066 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:22.165544033 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:22.165555954 CET	49745	443	192.168.2.4	184.28.90.27
Oct 31, 2024 22:20:22.165560007 CET	443	49745	184.28.90.27	192.168.2.4
Oct 31, 2024 22:20:22.529195070 CET	443	49749	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.529539108 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.529570103 CET	443	49749	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.533119917 CET	443	49749	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.533190966 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534140110 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534162998 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534214973 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534327030 CET	443	49749	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.534478903 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534504890 CET	49749	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534527063 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.534581900 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534900904 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.534918070 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.534970045 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.535283089 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.535290003 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.536753893 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.536811113 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.537201881 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.537291050 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.537444115 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.537450075 CET	443	49748	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.537494898 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.537503958 CET	49748	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.537739038 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.537763119 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.537826061 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.538216114 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.538229942 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.555586100 CET	443	49747	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.555758953 CET	443	49746	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.566144943 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.566159964 CET	443	49746	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.566271067 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.566329002 CET	443	49747	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.567173958 CET	443	49746	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.567224026 CET	443	49747	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.567231894 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.567287922 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.567635059 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.567635059 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.567676067 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.567704916 CET	443	49747	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.567775965 CET	49747	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.568043947 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.568089962 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.570241928 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.639837980 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.639857054 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.639915943 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.640144110 CET	443	49746	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.640206099 CET	49746	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.643362045 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.643404961 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.643470049 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.649871111 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.649888992 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:22.652692080 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:22.652724028 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.138731956 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.138952971 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.138973951 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.140016079 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.140067101 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.140453100 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.140515089 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.140677929 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.140685081 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.146904945 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.147161007 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.147176981 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.148622990 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.148682117 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.148992062 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.149072886 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.149100065 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.187926054 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.191375017 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.204031944 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.204041004 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.248281956 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.248718977 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.248748064 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.249417067 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.249608040 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.249628067 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.249771118 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.249826908 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.250267982 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.250329971 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.250382900 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.250642061 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.250694036 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.251056910 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.251117945 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.251213074 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.251280069 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.251288891 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286266088 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286314964 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286346912 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286360979 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.286386967 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286418915 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286433935 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.286442041 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286480904 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.286488056 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286499977 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.286540985 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.287632942 CET	49750	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.287646055 CET	443	49750	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.295331001 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.298702002 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.298702002 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.298708916 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317066908 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317126989 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317173958 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317183018 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.317194939 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317234993 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.317241907 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317301035 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317338943 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.317347050 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317461967 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.317500114 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.317507029 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.318424940 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.318470955 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.318476915 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.318495035 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.318537951 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.322088003 CET	49751	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.322101116 CET	443	49751	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.343288898 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.343341112 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.343413115 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.344063997 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.344079971 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.344777107 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.360661983 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.360687017 CET	443	49755	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.360739946 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.361104012 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.361118078 CET	443	49755	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.389607906 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.389676094 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.389739037 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.390582085 CET	49753	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.390592098 CET	443	49753	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392750978 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392792940 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392822981 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392839909 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.392855883 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392890930 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392930031 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.392939091 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392950058 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.392986059 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.394639969 CET	49752	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.394650936 CET	443	49752	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.399619102 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.399621964 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.399640083 CET	443	49757	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.399652004 CET	443	49758	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.399714947 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.399715900 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.399981022 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.399996042 CET	443	49757	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.400176048 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.400191069 CET	443	49758	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.955241919 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.955517054 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.955542088 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.956403017 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.956459045 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.956952095 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.956964970 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957007885 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.957010984 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957143068 CET	443	49754	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.957195997 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957211018 CET	49754	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957273006 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957298994 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.957356930 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957598925 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.957612038 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.977314949 CET	443	49755	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.977556944 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.977580070 CET	443	49755	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.979007006 CET	443	49755	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.979072094 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979366064 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979366064 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979445934 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979448080 CET	443	49755	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.979490995 CET	49755	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979681969 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979713917 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:23.979773998 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979942083 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:23.979957104 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.022455931 CET	443	49758	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.022715092 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.022737026 CET	443	49758	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.023622990 CET	443	49758	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.023679972 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024025917 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024058104 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024075985 CET	443	49758	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.024100065 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024127960 CET	49758	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024379969 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024461031 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.024594069 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024771929 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.024806976 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.036628962 CET	443	49757	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.036818981 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.036829948 CET	443	49757	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.037786961 CET	443	49757	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.037836075 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038085938 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038099051 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038135052 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038149118 CET	443	49757	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.038197041 CET	49757	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038348913 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038371086 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.038453102 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038697958 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.038708925 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.566317081 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.566631079 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.566649914 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.566930056 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.567364931 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.567364931 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.567378044 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.567423105 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.588799000 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.589034081 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.589046955 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.590470076 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.590614080 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.591110945 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.591110945 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.591186047 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.621747017 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.632189989 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.632404089 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.632461071 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.633312941 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.633394957 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.633682966 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.633753061 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.633793116 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.637512922 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.637521982 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.675342083 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.680633068 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.680898905 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.680910110 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.681912899 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.682126045 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.682378054 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.682442904 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.682601929 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.682614088 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.686439037 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.686449051 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.686479092 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.706233978 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.706273079 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.706300020 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.706382990 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.706403971 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.706533909 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.708514929 CET	49759	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.708528042 CET	443	49759	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.715327978 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.715389013 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.716492891 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.716717005 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.716746092 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.724064112 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:24.724090099 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:24.724184036 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:24.724399090 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:24.724411011 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:24.725845098 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.729948997 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730027914 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730070114 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730118036 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730118990 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.730129957 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730195999 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.730202913 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730304003 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.730309010 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730530024 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.730936050 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.730942965 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.731311083 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.732549906 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.732620955 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.732676029 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.733167887 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.736291885 CET	49760	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.736304998 CET	443	49760	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.781254053 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.781292915 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.781405926 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.784995079 CET	49761	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.785010099 CET	443	49761	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.828490019 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.828540087 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.828567982 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.828597069 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.828680038 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:24.828718901 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.834089994 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.892513990 CET	49762	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:24.892544985 CET	443	49762	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.318403006 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.318711996 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.318742990 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.319761992 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.319936991 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.320348978 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.320348978 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.320415020 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.320439100 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.320571899 CET	443	49764	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.320595026 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.320729971 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.320766926 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.320802927 CET	49764	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.321038008 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.321038008 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.321070910 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.331837893 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.332093000 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.332150936 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.333071947 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.333451986 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333489895 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333489895 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333569050 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.333596945 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333704948 CET	443	49763	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.333724022 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333797932 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333806992 CET	49763	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.333807945 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.333898067 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.334042072 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.334057093 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.935659885 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.936083078 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.937669992 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.937695980 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.937818050 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.937825918 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.938121080 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.938637972 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.938703060 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:25.938743114 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.938797951 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.942107916 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.942173958 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.942370892 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:25.942423105 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.942430973 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:25.985375881 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:25.987329006 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.082357883 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.082401037 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.082432032 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.082458973 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.082477093 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.082518101 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.082518101 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.082561016 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.085885048 CET	49768	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.085902929 CET	443	49768	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.212599039 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.212645054 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.212692976 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.212697983 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.212707996 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.212738991 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.212748051 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.212794065 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.212826014 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.212832928 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.213584900 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.213618040 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.213629961 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.213635921 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.213666916 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.331341982 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.331407070 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.331438065 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.331450939 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.331465006 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.331502914 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.331708908 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.331772089 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.331809998 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.331815958 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.332309008 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.332351923 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.332355022 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.332364082 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.332406998 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.332412004 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333230972 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333271027 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.333275080 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333308935 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333345890 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.333349943 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333395958 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333429098 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333432913 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.333437920 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.333471060 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.334153891 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.334247112 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.334291935 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.334816933 CET	49767	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.334827900 CET	443	49767	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.343966961 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.344005108 CET	443	49769	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.344059944 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.347738028 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.347755909 CET	443	49769	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.364996910 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.365021944 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.365070105 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.366050005 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.366065025 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.953449011 CET	443	49769	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.956763029 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.956784010 CET	443	49769	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.957639933 CET	443	49769	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.957799911 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.958225965 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.958260059 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.958280087 CET	443	49769	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.958338976 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.958338976 CET	49769	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.958678961 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.958709002 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.958868027 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.959127903 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:26.959145069 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:26.970191956 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.970402956 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.970426083 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.971456051 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.971703053 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972002983 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972048998 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972048998 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972063065 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.972207069 CET	443	49770	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.972260952 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972290039 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972290039 CET	49770	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.972294092 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:26.973119020 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.973119020 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:26.973146915 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.571609974 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.624686956 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:27.632348061 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:27.632364035 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.632811069 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.634073973 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.635355949 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.635376930 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.636348009 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.636411905 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.653368950 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:27.653441906 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.665489912 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.665560007 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.668385029 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:27.668431997 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.668446064 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.708564997 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.711335897 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.950073957 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.950155020 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.950197935 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:27.952464104 CET	49771	443	192.168.2.4	104.21.12.31
Oct 31, 2024 22:20:27.952490091 CET	443	49771	104.21.12.31	192.168.2.4
Oct 31, 2024 22:20:27.991776943 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.991833925 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.991864920 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.991868973 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.991878986 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.991918087 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.991925001 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.991966009 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.992003918 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.992006063 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.992017031 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.992057085 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.992063046 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.992450953 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:27.992490053 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:27.992496967 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.040082932 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.040102959 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.040154934 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.040600061 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.040612936 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.041410923 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.114833117 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.114902973 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.114953041 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.114959955 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.115011930 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.115047932 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.115053892 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.115088940 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.115129948 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.115137100 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116003036 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116048098 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116049051 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.116059065 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116101027 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.116106987 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116839886 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116878986 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.116883993 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116892099 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116935968 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.116942883 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.116977930 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.117017031 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.117023945 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.117633104 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.117682934 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.117688894 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.117738962 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.117779970 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.117943048 CET	49772	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.117954016 CET	443	49772	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.659456968 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.689765930 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.689780951 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.690810919 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.690880060 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.699158907 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.699182034 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.699227095 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.699331999 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.699340105 CET	443	49775	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.699352980 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.699385881 CET	49775	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.700117111 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.700154066 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:28.700222969 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.700855017 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:28.700870037 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.311131001 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.311577082 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:29.311590910 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.312047005 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.312442064 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:29.312519073 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.316816092 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:29.363332033 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.604363918 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.604490042 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:29.604547977 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:30.611211061 CET	49777	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:30.611234903 CET	443	49777	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:30.625622034 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:30.625799894 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:30.625852108 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:30.867871046 CET	49742	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:20:30.867888927 CET	443	49742	216.58.206.68	192.168.2.4
Oct 31, 2024 22:20:31.529572010 CET	49723	80	192.168.2.4	93.184.221.240
Oct 31, 2024 22:20:31.535237074 CET	80	49723	93.184.221.240	192.168.2.4
Oct 31, 2024 22:20:31.535394907 CET	49723	80	192.168.2.4	93.184.221.240
Oct 31, 2024 22:20:32.241394043 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.241411924 CET	443	49783	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.241504908 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.242981911 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.242997885 CET	443	49783	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.301567078 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.301578045 CET	443	49785	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.301841021 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.301992893 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.302011013 CET	443	49785	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.842473030 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:32.842525959 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:32.842586994 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:32.852757931 CET	49739	443	192.168.2.4	188.114.97.3
Oct 31, 2024 22:20:32.852767944 CET	443	49739	188.114.97.3	192.168.2.4
Oct 31, 2024 22:20:32.855070114 CET	443	49783	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.855249882 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.855256081 CET	443	49783	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.856108904 CET	443	49783	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.856165886 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.857882977 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.857897043 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.857933044 CET	443	49783	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.857939959 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.858031988 CET	49783	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.858369112 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.858448982 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.858515978 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.858714104 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.858747005 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.898569107 CET	443	49785	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.901456118 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.901470900 CET	443	49785	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.902323008 CET	443	49785	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.902384996 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.902806997 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.902806997 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.902858973 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.902861118 CET	443	49785	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.902968884 CET	49785	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.904928923 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.904958010 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:32.905021906 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.905266047 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:32.905278921 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.505256891 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.505521059 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.505530119 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.506383896 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.506525993 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.506814957 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.506870031 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.506968975 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.506975889 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.507688046 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.508049011 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.508106947 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.508968115 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.509027958 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.509571075 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.509630919 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.509692907 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.509711981 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.605704069 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.636976957 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.655432940 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655478954 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655504942 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655530930 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655538082 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.655555010 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655576944 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.655587912 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655616045 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655632973 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.655639887 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.655723095 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.655729055 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.661546946 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.661590099 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.661629915 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.661643982 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.661659002 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.661696911 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.662312984 CET	49786	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.662327051 CET	443	49786	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.776453972 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.776489973 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.776508093 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.776518106 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.776567936 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.776616096 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.776928902 CET	49787	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.776947975 CET	443	49787	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.784086943 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.784128904 CET	443	49789	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:33.784245014 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.784734011 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:33.784748077 CET	443	49789	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:34.401881933 CET	443	49789	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:34.402122021 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.402148008 CET	443	49789	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:34.403001070 CET	443	49789	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:34.403064013 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.403577089 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.403599024 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.403633118 CET	443	49789	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:34.403660059 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.403691053 CET	49789	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.403954983 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.403983116 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:34.404043913 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.404253960 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:34.404266119 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.159672022 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.164531946 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.164551973 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.165644884 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.168359041 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.176542044 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.176597118 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.180310965 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.224605083 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.224616051 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.289261103 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.323000908 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323200941 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323229074 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323262930 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323292971 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.323297024 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323304892 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323333979 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.323375940 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.323611975 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323843956 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323868990 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.323898077 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.323904037 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.324449062 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.439730883 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.439821959 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.439862013 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:20:35.440030098 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.440419912 CET	49790	443	192.168.2.4	172.67.131.236
Oct 31, 2024 22:20:35.440429926 CET	443	49790	172.67.131.236	192.168.2.4
Oct 31, 2024 22:21:09.471493006 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:09.471518040 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:09.471626043 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:09.472275019 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:09.472285986 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.371078014 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.371145010 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.373615980 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.373625994 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.373822927 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.381422997 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.427329063 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.606821060 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.606841087 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.606858969 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.606950998 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.606950998 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.606961966 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.607139111 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.625883102 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.625899076 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.626122952 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.626128912 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.626192093 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.723162889 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.723180056 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.723263025 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.723263025 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.723270893 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.723362923 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.741429090 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.741450071 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.741550922 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.741550922 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.741559029 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.741681099 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.744508028 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.744524956 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.744618893 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.744618893 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.744630098 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.744839907 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.747006893 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.747023106 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.747119904 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.747126102 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.748405933 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.838505030 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.838519096 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.838769913 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.838777065 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.838861942 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.855901957 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.855916023 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.856014013 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.856019974 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.856115103 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.856549025 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.856564045 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.856667042 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.856667042 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.856673002 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.856751919 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.857536077 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.857549906 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.857645035 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.857645035 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.857650995 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.857839108 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.857856035 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.857867956 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.857871056 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.857888937 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.858061075 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.858803988 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.858818054 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.858995914 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.859000921 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.859200954 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.859668016 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.859687090 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.859735012 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.859739065 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.859761953 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.859819889 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.953330040 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.953372955 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.953401089 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.953485966 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.953485966 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.953499079 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.953509092 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.999644995 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.999649048 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:10.999665976 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:10.999705076 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.000396013 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.000396967 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.001646996 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.001647949 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.001656055 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.001657963 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.001806974 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.001806974 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.001837969 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.002002001 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.002016068 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.002552986 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.002553940 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.002580881 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.002580881 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.004388094 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.004389048 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.004530907 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.004544020 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.004746914 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.004760027 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.734971046 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.739160061 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.742501020 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.745254993 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.751146078 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.768881083 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.768894911 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.771635056 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.771640062 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.774234056 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.774254084 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.779419899 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.781892061 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.781897068 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.784261942 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.784358025 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.784367085 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.787003040 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.787008047 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.787182093 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.787192106 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.790186882 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.790191889 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.792995930 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.793006897 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.793929100 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.793931961 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907270908 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907351017 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907473087 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.907481909 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907505989 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907552958 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.907568932 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907578945 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.907578945 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.907584906 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.907591105 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.908447981 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.908550024 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.908607006 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.908704996 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.908715963 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.908724070 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.908730030 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.910269022 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.910279989 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.910334110 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.910463095 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.910473108 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.911009073 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.911021948 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.911134958 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.911211014 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.911217928 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912703037 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912722111 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912765980 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.912781000 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912816048 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.912903070 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912940979 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912945986 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.912946939 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.912962914 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.912992954 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.912998915 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.914675951 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.914757013 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.914829016 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.914932013 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.914963961 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.919289112 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.919367075 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.919580936 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.919668913 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.919668913 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.919680119 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.919687986 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.921782970 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.921812057 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.921857119 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.921957016 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.921973944 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.930627108 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.930676937 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.930728912 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.930735111 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.930784941 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.930804968 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.930850029 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.930907011 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.930913925 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.930922031 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.930924892 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.932528019 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.932562113 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:11.932635069 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.932746887 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:11.932770014 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.637772083 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.642683029 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.642693996 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.643234968 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.643240929 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.657912970 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.658174992 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.658205032 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.658550024 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.658557892 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.660577059 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.661560059 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.661578894 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.662012100 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.662017107 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.667804956 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.668275118 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.668339968 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.668977976 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.668998957 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.670454979 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.670743942 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.670763016 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.671098948 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.671112061 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.780486107 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.780540943 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.780930996 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.780946970 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.780956030 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.780970097 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.780973911 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.784503937 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.784552097 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.784640074 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.784938097 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.784955978 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.788801908 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.788980961 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.789043903 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.789074898 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.789074898 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.789087057 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.789097071 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.791512966 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.791651011 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.791824102 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.791965008 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.791975975 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.791985989 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.791990042 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.796760082 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.797117949 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.797395945 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798069000 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798094988 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.798177958 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798271894 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798310041 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.798332930 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.798358917 CET	49800	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798374891 CET	443	49800	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.798564911 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.798621893 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798902035 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.798913956 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.801873922 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.801924944 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.802037001 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.802886009 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.802921057 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.803363085 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.803371906 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.803536892 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.803881884 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.803890944 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.804291964 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.804330111 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.804358959 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.804369926 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.808527946 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.808572054 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:12.808670044 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.808903933 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:12.808933020 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.572431087 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.572892904 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.572921038 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.573343039 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.573348045 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.574994087 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.575337887 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.575359106 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.575754881 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.575758934 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.576163054 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.576446056 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.576462030 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.576782942 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.576792002 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.578958035 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.579211950 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.579226017 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.579510927 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.579514980 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.616961002 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.617253065 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.617268085 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.617594957 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.617599010 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.703578949 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.703865051 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.704006910 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.704093933 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.704122066 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.704133034 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.704148054 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.704152107 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.704183102 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.704225063 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.704325914 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.704343081 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.704353094 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.704359055 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.705881119 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.705929041 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.705985069 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.706192017 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.706207037 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.706250906 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.706263065 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.706923962 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.706953049 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.707343102 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.707495928 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.707515955 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.707712889 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.707797050 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.707866907 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.707962036 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.707993984 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.708045959 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.708060026 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.708165884 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.708225012 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.708235979 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.709279060 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.709461927 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.709656954 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.709683895 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.709687948 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.709695101 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.709697962 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.711158037 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.711186886 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.711256981 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.711359978 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.711385012 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.748068094 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.748821974 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.748863935 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.748918056 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.748918056 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.748929977 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.748939037 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.750535011 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.750554085 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:13.750612974 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.750727892 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:13.750739098 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.428706884 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.429117918 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.429136038 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.429502010 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.429507017 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.432980061 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.433257103 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.433264971 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.433583021 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.433587074 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.457096100 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.457484007 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.457531929 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.457799911 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.457829952 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.480992079 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.481347084 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.481372118 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.481645107 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.481654882 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.504429102 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.504710913 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.504729033 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.505016088 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.505019903 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.562582016 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.562856913 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.562905073 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.562958956 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.562973976 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.562983036 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.562994003 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.565259933 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.565282106 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.565341949 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.565478086 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.565490961 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.590642929 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.590912104 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.590981007 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.591068029 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.591068983 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.591109991 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.591141939 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.592828989 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.592852116 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.593095064 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.593221903 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.593234062 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.616897106 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.617103100 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.617161989 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.617206097 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.617224932 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.617253065 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.617265940 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.619285107 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.619323969 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.619447947 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.619575977 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.619590998 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.632462025 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.632605076 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.632656097 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.632674932 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.632684946 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.632694006 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.632697105 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.634373903 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.634399891 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.634460926 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.634584904 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.634598017 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.702739954 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.702794075 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.702872038 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.702991962 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.702999115 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.703011036 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.703013897 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.705147982 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.705164909 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:14.705377102 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.705497980 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:14.705511093 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.325486898 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.326267958 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.326287031 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.326419115 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.326677084 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.326680899 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.326776028 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.326801062 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.327230930 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.327235937 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.355431080 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.355721951 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.355752945 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.356053114 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.356060982 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.389849901 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.390167952 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.390187979 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.390549898 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.390554905 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.433526039 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.433909893 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.433923960 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.434495926 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.434501886 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.452657938 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.452883005 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.452939034 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.452958107 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.452971935 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.453011036 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.453016043 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.455569983 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.455594063 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.455653906 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.455773115 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.455784082 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.461250067 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.461520910 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.461568117 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.461599112 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.461613894 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.461622000 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.461627007 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.463323116 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.463345051 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.463481903 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.463597059 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.463608027 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.486655951 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.486773014 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.486841917 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.486891985 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.486908913 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.486920118 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.486929893 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.488693953 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.488717079 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.488769054 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.488913059 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.488924026 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.564831972 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.565064907 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.565125942 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.565179110 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.565186977 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.565206051 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.565217018 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.566919088 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.566936016 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.566994905 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.567090034 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.567100048 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.677351952 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.677726984 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.677819967 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.677819967 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.678097010 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.678117037 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.679738045 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.679754972 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:15.679850101 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.679970980 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:15.679981947 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.189745903 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.191382885 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.191382885 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.191421986 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.191437006 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.207855940 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.210652113 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.210676908 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.211225033 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.211230040 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.229696989 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.230165958 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.230190039 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.230797052 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.230802059 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.282371998 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.285293102 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.285309076 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.286276102 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.286281109 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.322520018 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.322679043 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.323101997 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.330980062 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.330995083 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.331053019 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.331059933 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.336483002 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.336529016 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.336975098 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.337189913 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.337209940 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.340527058 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.340575933 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.340715885 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.346581936 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.346591949 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.346715927 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.346723080 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.350267887 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.350349903 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.350452900 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.354285955 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.354317904 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.361294031 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.361341000 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.361409903 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.363476992 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.363485098 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.363511086 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.363513947 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.365286112 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.365310907 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.365364075 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.365526915 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.365550041 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.410552979 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.410804033 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.414330006 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.414330006 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.414361000 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.414365053 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.415971041 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.416009903 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.418370008 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.418498993 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.418530941 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.421499968 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.422749996 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.422764063 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.423149109 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.423154116 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.550409079 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.551125050 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.551340103 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.556463957 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.556472063 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.556500912 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.556509018 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.583333969 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.583383083 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:16.583497047 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.583750010 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:16.583765030 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.091770887 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.092255116 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.092279911 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.092766047 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.092771053 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.110825062 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.111815929 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.111829996 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.112402916 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.112406969 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.338666916 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.338820934 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.338876963 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.338946104 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.338963032 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.338973999 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.338979959 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.339366913 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.339937925 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.339967012 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.339983940 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.340783119 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.340790033 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.340922117 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.340930939 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.341295004 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.341300964 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.342937946 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.342977047 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.343050957 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.343197107 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.343210936 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.464636087 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.464884996 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.464935064 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.464972019 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.464992046 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.465002060 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.465007067 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.467921019 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.467961073 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.468010902 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.468153000 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.468168020 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.471069098 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.471251965 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.471540928 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.471549988 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.471554995 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.471599102 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.471677065 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.471704006 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.471719027 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.471725941 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.472263098 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.472268105 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.473539114 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.473570108 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.473632097 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.473762989 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.473774910 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.475164890 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.475224972 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.475265026 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.475403070 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.475410938 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.475426912 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.475430965 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.477358103 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.477397919 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.477462053 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.477629900 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.477648020 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.599881887 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.600032091 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.600111961 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.600111961 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.600182056 CET	49828	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.600189924 CET	443	49828	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.601752043 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.601793051 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:17.601906061 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.602011919 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:17.602026939 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.077526093 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.078284025 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.078305960 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.078432083 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.078435898 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.196511984 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.197395086 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.197395086 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.197426081 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.197436094 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.200166941 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.200957060 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.200957060 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.200974941 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.200983047 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.204215050 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.204701900 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.204730034 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.205024958 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.205032110 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.206271887 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.206497908 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.206619978 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.206619978 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.206686974 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.206695080 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.208905935 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.208945990 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.209029913 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.209157944 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.209171057 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.325948954 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.326154947 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.326241016 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.326241016 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.326296091 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.326307058 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.328605890 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.328643084 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.328898907 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.329113007 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.329124928 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.329449892 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.329899073 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.329976082 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.329976082 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.329989910 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.329994917 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.330064058 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.330897093 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.330897093 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.330907106 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.330919981 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.331983089 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.332011938 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.332181931 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.332181931 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.332210064 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.335556030 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.335782051 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.335879087 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.335879087 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.335917950 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.335935116 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.337598085 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.337625980 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.337691069 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.337793112 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.337805033 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.457406998 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.457585096 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.457670927 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.457670927 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.457710981 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.457720041 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.459342957 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.459357023 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.459537029 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.459537029 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:18.459556103 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:18.804977894 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:18.805001974 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:18.805217981 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:18.819926023 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:18.819943905 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:18.983767986 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.014245987 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.014312029 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.014739990 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.014755011 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.059324980 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.062602043 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.062635899 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.065373898 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.065380096 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.066337109 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.068519115 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.068537951 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.071346045 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.071350098 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.081021070 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.088677883 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.088699102 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.091516972 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.091521978 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.146214008 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.146361113 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.149333000 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.161288977 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.161333084 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.164093018 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.164123058 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.164304972 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.164665937 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.164676905 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.195913076 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.196091890 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.196290016 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.196326971 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.196326971 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.196348906 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.196362019 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.198317051 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.198395014 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.198503971 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.198538065 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.198785067 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.198832035 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.198856115 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.198908091 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.198961020 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.198961020 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.198978901 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.198990107 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.200783014 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.200797081 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.200855017 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.201037884 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.201049089 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.206494093 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.206945896 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.206955910 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.207341909 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.207348108 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.218432903 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.218800068 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.218859911 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.218894958 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.218915939 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.218931913 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.218945026 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.221263885 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.221296072 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.221529961 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.221682072 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.221707106 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.337606907 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.337764025 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.337862968 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.337902069 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.337902069 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.337912083 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.337922096 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.339998007 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.340024948 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.340087891 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.340275049 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.340287924 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.667068958 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:19.667429924 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:19.667450905 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:19.667736053 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:19.668730974 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:19.668788910 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:19.715797901 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:19.914232969 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.914686918 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.914702892 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.915189981 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.915194035 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.928661108 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.928985119 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.928992987 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.929375887 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.929379940 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.935015917 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.935600996 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.935621977 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.935967922 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.935972929 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.952234030 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.952672005 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.952678919 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:19.953008890 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:19.953013897 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.041351080 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.041522026 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.041579962 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.041629076 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.041642904 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.041652918 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.041656971 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.045490980 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.045532942 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.045746088 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.045998096 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.046015978 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.059425116 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.059545040 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.059597015 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.059700966 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.059700966 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.059705973 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.059712887 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.062100887 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.062140942 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.062216043 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.062342882 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.062357903 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.063642025 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.063802004 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.063863039 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.063886881 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.063886881 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.063899040 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.063906908 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.065748930 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.065762997 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.065876961 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.066042900 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.066056013 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.074691057 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.074973106 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.074986935 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.075442076 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.075448036 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.080945969 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.081037998 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.081087112 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.081151009 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.081156015 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.081170082 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.081172943 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.082982063 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.083050966 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.083122969 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.083256960 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.083286047 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.209769011 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.209933996 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.209986925 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.210026026 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.210026026 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.210040092 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.210050106 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.211872101 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.211899042 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.212114096 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.212248087 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.212265968 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.361376047 CET	49724	80	192.168.2.4	93.184.221.240
Oct 31, 2024 22:21:20.366677046 CET	80	49724	93.184.221.240	192.168.2.4
Oct 31, 2024 22:21:20.366733074 CET	49724	80	192.168.2.4	93.184.221.240
Oct 31, 2024 22:21:20.784187078 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.784647942 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.784677029 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.785207033 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.785213947 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.790244102 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.790559053 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.790584087 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.790954113 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.790961027 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.813776016 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.814150095 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.814178944 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.814600945 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.814606905 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.827651024 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.827970028 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.828022957 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.828423977 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.828442097 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.921360970 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.921700001 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.921778917 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.931473017 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.931488037 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.931500912 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.931509018 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.936191082 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.936239958 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.936320066 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.936515093 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.936539888 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.943345070 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.943561077 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.943619967 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.943649054 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.943665981 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.943672895 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.943679094 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.946428061 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.946475029 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.946713924 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.946870089 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.946886063 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.948503971 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.948908091 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.948920965 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.949273109 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.949276924 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.960803986 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.961128950 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.961189985 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.961252928 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.961252928 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.961277962 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.961302042 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.963030100 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.963057041 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:20.963128090 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.963267088 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:20.963279009 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.027041912 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.027132988 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.027184963 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.027283907 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.027291059 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.027306080 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.027311087 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.029542923 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.029578924 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.029656887 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.029804945 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.029819012 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.105654001 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.105820894 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.105885029 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.106010914 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.106010914 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.106024027 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.106033087 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.108354092 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.108395100 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.108513117 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.108656883 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.108674049 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.910758972 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.911174059 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.911257029 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.911583900 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.911597013 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.916301012 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.916609049 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.916646004 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.916918993 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.916924953 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.917531013 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.917803049 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.917823076 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.918100119 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.918104887 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.918533087 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.918756962 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.918775082 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.919039011 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.919043064 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.921374083 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.921655893 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.921672106 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:21.921948910 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:21.921953917 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.043396950 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.043714046 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.043824911 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.043893099 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.043893099 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.043930054 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.043953896 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.046416998 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.046446085 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.046514988 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.046706915 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.046720028 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.046726942 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.046797037 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.046879053 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.046927929 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.046927929 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.046946049 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.046957016 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.047738075 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.048012018 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.048069000 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.048141956 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.048146963 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.048177004 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.048182964 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.049829960 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.049838066 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.050106049 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.050266027 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.050278902 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.050463915 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.050487041 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.050538063 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.050682068 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.050695896 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.050781012 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051106930 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051140070 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051162958 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.051282883 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.051290989 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051301003 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.051305056 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051395893 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051542044 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.051604986 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.051620960 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.051629066 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.051634073 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.053638935 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.053647041 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.053699970 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.053848028 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.053858042 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.054207087 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.054218054 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.054275990 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.054416895 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.054429054 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.790494919 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.790924072 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.791497946 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.791517019 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.791810989 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.791824102 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.792365074 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.792365074 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.792371035 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.792383909 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.793227911 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.793617964 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.793623924 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.794226885 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.794230938 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.797632933 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.799453974 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.799489975 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.799989939 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.799995899 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.815237999 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.815728903 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.815738916 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.816808939 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.816814899 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.917529106 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.917603016 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.920912027 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.923007965 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.923165083 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.923330069 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.923674107 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.923794031 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.923943043 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.928284883 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.928431988 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.929224968 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.934129000 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.934129000 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.934144020 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.934153080 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.945204020 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.945204020 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.945211887 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.945214987 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.946523905 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.946528912 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.946564913 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.946571112 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.948168993 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.948188066 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.948309898 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.948317051 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.950754881 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.951065063 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.951488972 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.952513933 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.952555895 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.952668905 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.953053951 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.953059912 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.953107119 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.953113079 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.954941988 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.955024004 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.955199957 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.955359936 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.955379009 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.957751989 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.957772970 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.957776070 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.957796097 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.957865953 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.957866907 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.958235979 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.958271027 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.959386110 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.959391117 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.959415913 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.959415913 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.959465981 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.959477901 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:22.959482908 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.959702969 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:22.959714890 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.687582016 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.688107014 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.688148975 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.688587904 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.688608885 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.688626051 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.688927889 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.688941956 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.689285040 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.689295053 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.690165043 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.690479994 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.690495968 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.690989971 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.690994024 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.696232080 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.696571112 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.696583986 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.697041988 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.697047949 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.705035925 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.705378056 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.705384970 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.705741882 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.705745935 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.816740990 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.816868067 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.816921949 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.817047119 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.817100048 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.817131996 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.817146063 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.818638086 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.818687916 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.818736076 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.819515944 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.819529057 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.819572926 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.819583893 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.820358992 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.820415020 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.820463896 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.821907043 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.821919918 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.821933031 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.821938038 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.827531099 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.827559948 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.827610016 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.828937054 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.829083920 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.829128027 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.829924107 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.829943895 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.829989910 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.830403090 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.830415964 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.831173897 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.831192017 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.831202984 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.831208944 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.834397078 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.834405899 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.834460974 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.834588051 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.834739923 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.834783077 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.834949970 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.834959984 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.835376978 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.835386992 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.837207079 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.837249041 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.837300062 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.837563038 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.837575912 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.837932110 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.837937117 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.837946892 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.837949991 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.841794968 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.841833115 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:23.841887951 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.842458963 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:23.842474937 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.555665016 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.556145906 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.556171894 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.556550980 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.556555986 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.557147026 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.557570934 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.557581902 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.558099031 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.558101892 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.561300993 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.561610937 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.561667919 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.562118053 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.562133074 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.564713955 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.565063953 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.565084934 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.565412998 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.565418959 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.584027052 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.584403992 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.584429979 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.584745884 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.584752083 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.683052063 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.683321953 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.683518887 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.683581114 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.683593988 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.683605909 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.683610916 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.686743975 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.686824083 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.686902046 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.687082052 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.687114000 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.687129021 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.687175989 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.687378883 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.687423944 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.687427998 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.687437057 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.687439919 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.689543009 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.689563990 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.689594984 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.689707994 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.689750910 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.689799070 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.689876080 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.689902067 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.689925909 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.689939976 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.689964056 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.689981937 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.692012072 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.692025900 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.692100048 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.692260027 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.692269087 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.692615032 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.693295002 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.693351030 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.693380117 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.693392038 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.693403006 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.693408012 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.695147991 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.695163012 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.695235968 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.695333958 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.695344925 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.721872091 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.721991062 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.722058058 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.722170115 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.722170115 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.722188950 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.722201109 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.724035025 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.724045992 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:24.724117994 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.724219084 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:24.724226952 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.413305044 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.413731098 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.413754940 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.414149046 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.414154053 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.419460058 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.420021057 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.420044899 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.421498060 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.421504974 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.425298929 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.425775051 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.425806999 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.426270962 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.426276922 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.429639101 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.429909945 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.429933071 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.430322886 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.430330038 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.688107014 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.688127041 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.688173056 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.688249111 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.688249111 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.688853025 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.692874908 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.692874908 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.692890882 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.692899942 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.695014000 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.695029974 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.695501089 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.695504904 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.696697950 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.696716070 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.696820974 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.698978901 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.698991060 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810004950 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810086966 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810241938 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810297966 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810403109 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810405970 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810436964 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810441971 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810441971 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810451984 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810458899 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810461044 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810468912 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810470104 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810647011 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810672045 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810755014 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.810774088 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810786963 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.810890913 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.811278105 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.811290979 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.811328888 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.811335087 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.813277006 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.813308954 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.813419104 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.813607931 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.813608885 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.813623905 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.813631058 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.813858032 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.814409971 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.814419985 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.814496040 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.814603090 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.814604998 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.814615011 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.814631939 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.823826075 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.823844910 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.823887110 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.823906898 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.824081898 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.824081898 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.824126959 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.824131012 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.826137066 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.826159000 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:25.826328993 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.826446056 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:25.826462030 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.438920975 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.492438078 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.549638987 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.554075003 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.561094046 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.563028097 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.597747087 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.597915888 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.612301111 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.612303972 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.628416061 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.628423929 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.629221916 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.629228115 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.629762888 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.629790068 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.630338907 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.630351067 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.630836964 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.630846977 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.631508112 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.631513119 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.632141113 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.632148027 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.632663012 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.632667065 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.632970095 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.632973909 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.633476019 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.633480072 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.757210016 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.757319927 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.757388115 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.757544041 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.757544041 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.757561922 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.757570982 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.758004904 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.758188009 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.758265972 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.759675026 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.759692907 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.759700060 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.759705067 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.759839058 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.759860039 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.759907961 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.759918928 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.759947062 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.761790991 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.761810064 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.761972904 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.761986971 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.763248920 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.770442963 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.770477057 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.770544052 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.772268057 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.772300959 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.772435904 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.774580002 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.774590969 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.774666071 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.775477886 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.775492907 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.775854111 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.775866985 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.776123047 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.776133060 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.789196968 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.789258957 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.789295912 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.789303064 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.789316893 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.789320946 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.792315006 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.792335033 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.792498112 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.792895079 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.792907000 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.929423094 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.929600000 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.929666042 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.929718971 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.929733992 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.929745913 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.929749966 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.932240009 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.932317019 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:26.932384968 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.932533026 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:26.932569027 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.690109968 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.690113068 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.690663099 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.690680027 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.690684080 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.690721989 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.690984011 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.691324949 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.691324949 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.691329956 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.691330910 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.691426992 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.691437960 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.691663027 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.691771984 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.691776037 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.692348957 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.692348957 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.692390919 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.692409039 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.692783117 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.693432093 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.693432093 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.693447113 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.693466902 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.820693970 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.820816040 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.821012020 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.821042061 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.821043015 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.821060896 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.821078062 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.821414948 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.821579933 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.821729898 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.821867943 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.821867943 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.821887016 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.821897984 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.822370052 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.822415113 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.822582960 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.822622061 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.822691917 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.822706938 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824366093 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824407101 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824577093 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824609041 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824609041 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824645996 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824672937 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824826956 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824826956 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824827909 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.824836016 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824841976 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824848890 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.824899912 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.825072050 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.825084925 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.826488972 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.826503992 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.826514006 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.826518059 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.826795101 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.826809883 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.826944113 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.826957941 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.826960087 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.826976061 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.828824043 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.828886032 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.829051971 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.829051971 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.829066038 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.829071045 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.830750942 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.830784082 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:27.830945969 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.830945969 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:27.830981016 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.550277948 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.551120043 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.551120996 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.551160097 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.551176071 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.562510014 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.563210011 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.563210011 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.563230038 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.563241959 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.563361883 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.563992023 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.563992023 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.564001083 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.564012051 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.564600945 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.564909935 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.565000057 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.565202951 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.565217018 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.571947098 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.572526932 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.572526932 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.572545052 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.572560072 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904162884 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904189110 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904225111 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904313087 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904350996 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.904365063 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904525042 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904594898 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904623032 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.904789925 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904817104 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904839993 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.904886961 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.905035973 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.905064106 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.905118942 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.905350924 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.906583071 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.906605005 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.906640053 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.906646967 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.907593966 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.907624960 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.907655001 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.907670021 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.908616066 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.908638954 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.908653975 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.908658981 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.909468889 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.909486055 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.909516096 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.909521103 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.910486937 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.910500050 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.910526991 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.910533905 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.913650990 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.913672924 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.913810015 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.915644884 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.915651083 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.915661097 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.915674925 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.916186094 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.916220903 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.916249990 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.916292906 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.916443110 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.916455030 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.917807102 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.917808056 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.917824984 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.917836905 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.918071985 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.918704987 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.918721914 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.918853045 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.918906927 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.918922901 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:28.924623013 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:28.924637079 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.655843973 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.656310081 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.656354904 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.656784058 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.656790018 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.657391071 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.657938004 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.657969952 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.658305883 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.658312082 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.661401033 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.661711931 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.661745071 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.662127972 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.662134886 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.664326906 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.664625883 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.664655924 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.664988995 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.664995909 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.666809082 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.667118073 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.667135954 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.667478085 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.667484045 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.681324005 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:29.681379080 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:29.681464911 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:29.797137022 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797187090 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797274113 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797306061 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797314882 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.797333956 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797359943 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797390938 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.797411919 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.797657013 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.797676086 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797674894 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797739983 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.797790051 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.797981977 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.798043013 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.798140049 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.798193932 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.799355030 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.799379110 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.799395084 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.799401045 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.800991058 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.800997019 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.801012039 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.801017046 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.802583933 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.802607059 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.803651094 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.803668022 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.809015989 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.809048891 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.809184074 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.812305927 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.812339067 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.812519073 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.813533068 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.813566923 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.813651085 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.820244074 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.820257902 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.820336103 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.821309090 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.821326017 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.821428061 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.821582079 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.821599007 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.822030067 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.822053909 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.822196960 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.822211027 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.822371006 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.822385073 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:29.822443008 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:29.822448969 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.108711958 CET	49839	443	192.168.2.4	216.58.206.68
Oct 31, 2024 22:21:31.108750105 CET	443	49839	216.58.206.68	192.168.2.4
Oct 31, 2024 22:21:31.378392935 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.378940105 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.378968954 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.379396915 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.379401922 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.379419088 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.379654884 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.379848003 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.379873037 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.379955053 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.379977942 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.380323887 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.380330086 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.380930901 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.380938053 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.384804010 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.385205030 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.385212898 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.385551929 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.385556936 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.385694027 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.386027098 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.386034012 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.386641026 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.386646032 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.509679079 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.511065960 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.511109114 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.511162996 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.511205912 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.511292934 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.511307001 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.511326075 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.511331081 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.512515068 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.512588978 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.512639046 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.512706041 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.512722969 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.512765884 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.513508081 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.513523102 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.513535023 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.513544083 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.513782978 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.513798952 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.513819933 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.513825893 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.515647888 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.515727043 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.515832901 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.515850067 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.515906096 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.516201973 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.516290903 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.516393900 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517205954 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517239094 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.517302990 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517446041 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517446041 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517452002 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.517460108 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.517654896 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517668009 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.517802954 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.517853975 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.518512011 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.518537045 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.518806934 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.518918037 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.518951893 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.519723892 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.519890070 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.519918919 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.519927025 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.519948959 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.520029068 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.520160913 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.520167112 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.520179033 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.520184040 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.520256996 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.520272017 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.522289991 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.522311926 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:31.522382021 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.522485018 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:31.522495985 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.273281097 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.273647070 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.273771048 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.273791075 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.274132013 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.274187088 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.274202108 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.274207115 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.274576902 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.274593115 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.279906988 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.280534983 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.280534983 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.280560017 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.280569077 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.291057110 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.291541100 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.291553020 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.291745901 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.291755915 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.299093962 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.299761057 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.299762011 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.299799919 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.299822092 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.401278019 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.401421070 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.401483059 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.401602983 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.401623964 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.401649952 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.401654959 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.403017998 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.403036118 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.403079987 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.403194904 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.403194904 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.404206038 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.404206038 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.404239893 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.404266119 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.404386997 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.404417038 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.404561043 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.405390978 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.405405998 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.408377886 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.408411026 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.410612106 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.411218882 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.411235094 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.411411047 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.411576033 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.411652088 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.411721945 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.411721945 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.411731958 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.411736965 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.413909912 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.413919926 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.414091110 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.414091110 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.414108038 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.421267986 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.421442986 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.421552896 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.421552896 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.421575069 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.421582937 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.423382998 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.423407078 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.423595905 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.423691034 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.423703909 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.433356047 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.433541059 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.433621883 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.433809042 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.433821917 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.433860064 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.433872938 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.435638905 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.435674906 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:32.435851097 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.435894012 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:32.435909033 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.750895023 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.751434088 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.751446962 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.751662970 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.751995087 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.751996040 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.752001047 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.752022028 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.752331018 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.752402067 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.752407074 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.752705097 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.752717972 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.753107071 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.753113031 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.755182028 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.755649090 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.755656004 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.756036997 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.756042004 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.880366087 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.880399942 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.880450010 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.880491972 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.880599976 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.880599976 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.880634069 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.880645037 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.881784916 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.881845951 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.881968021 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.882509947 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.882524014 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.882555962 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.882561922 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.883249044 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.883454084 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.883682013 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.883761883 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.883761883 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.883775949 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.883785963 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.884083033 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.884109020 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.884270906 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.884922028 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.884939909 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.885528088 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.885615110 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.885730028 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.885793924 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.885816097 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.886209011 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.886243105 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.886645079 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.886682034 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.886691093 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.905178070 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.905328035 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.905388117 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.905417919 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.905417919 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.905424118 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.905431986 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.907705069 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.907736063 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:33.907828093 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.907918930 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:33.907929897 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.203242064 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.203675985 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.203722954 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.204118967 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.204133034 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.330715895 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.330838919 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.330985069 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.330986023 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.331052065 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.331084013 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.333364964 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.333415985 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.333645105 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.333645105 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.333689928 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.615572929 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.615890026 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.616223097 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.616266966 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.616913080 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.616940022 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.617301941 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.617316008 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.617805958 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.617810965 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.624449015 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.624885082 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.624929905 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.626008034 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.626014948 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.644628048 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.645076036 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.645102978 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.645550013 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.645560980 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.745403051 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.745513916 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.745585918 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.745795965 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.745827913 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.745850086 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.745863914 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.745887995 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.746115923 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.746170044 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.746243000 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.747596979 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.747610092 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.747621059 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.747627020 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.749809980 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.749844074 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.749928951 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.750823021 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.750848055 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.750946999 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.750958920 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.750973940 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.751061916 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.751076937 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.758415937 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.758596897 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.758644104 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.758682966 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.758701086 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.758714914 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.758721113 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.761001110 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.761023998 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.761101007 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.761240959 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.761253119 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.787010908 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.787162066 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.787215948 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.788645983 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.788645983 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.788652897 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.788661957 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.793477058 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.793488979 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:34.793566942 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.793720961 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:34.793731928 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.073900938 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.074316025 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.074328899 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.074769020 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.074774981 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.205262899 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.205290079 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.205322027 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.205374956 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.205598116 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.205617905 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.205631971 CET	49914	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.205638885 CET	443	49914	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.208260059 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.208292007 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.208353043 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.208466053 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.208477020 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.489360094 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.489872932 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.489908934 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.490293026 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.490298033 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.493591070 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.493905067 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.493921995 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.494270086 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.494273901 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.500674009 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.501046896 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.501077890 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.501408100 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.501413107 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.566459894 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.566853046 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.566869020 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.567405939 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.567410946 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.620258093 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.620280027 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.620315075 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.620333910 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.620376110 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.620526075 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.620543003 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.620553970 CET	49916	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.620558977 CET	443	49916	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.623135090 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.623194933 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.623255014 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.623613119 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.623625040 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.623634100 CET	49917	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.623637915 CET	443	49917	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.625076056 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.625106096 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.625159025 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.625278950 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.625293016 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.626455069 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.626476049 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.626543045 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.626702070 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.626713991 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.635308027 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.635481119 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.635549068 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.635602951 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.635612011 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.635643005 CET	49915	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.635647058 CET	443	49915	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.638670921 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.638680935 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.638724089 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.638967991 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.638978958 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.701811075 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.701869011 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.701950073 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.701961994 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.701978922 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.702065945 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.702078104 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.702119112 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.702124119 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.702158928 CET	49918	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.702162981 CET	443	49918	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.704430103 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.704454899 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:35.704519033 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.704649925 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:35.704663992 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.065924883 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.066535950 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.066555023 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.066997051 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.067002058 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.194895983 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.194945097 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.195044994 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.195205927 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.195205927 CET	49919	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.195220947 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.195230007 CET	443	49919	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.198314905 CET	49924	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.198350906 CET	443	49924	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.198436975 CET	49924	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.198596954 CET	49924	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.198611975 CET	443	49924	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.342541933 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.343414068 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.343414068 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.343444109 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.343455076 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.355456114 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.356235981 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.356235981 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.356256008 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.356265068 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.392829895 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.393388033 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.393403053 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.393896103 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.393902063 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.437036037 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.437603951 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.437623024 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.437963009 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.437968016 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.470539093 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.470561981 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.470603943 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.470614910 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.470690966 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.470909119 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.470923901 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.470952034 CET	49920	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.470957994 CET	443	49920	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.473453999 CET	49925	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.473521948 CET	443	49925	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.473683119 CET	49925	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.473769903 CET	49925	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.473803043 CET	443	49925	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.483844042 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.483906984 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.484069109 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.484069109 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.484103918 CET	49921	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.484113932 CET	443	49921	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.486248970 CET	49926	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.486280918 CET	443	49926	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.486430883 CET	49926	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.486515999 CET	49926	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.486535072 CET	443	49926	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.522763014 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.522852898 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.522972107 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.522980928 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.523000002 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.523112059 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.523112059 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.523219109 CET	49922	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.523225069 CET	443	49922	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.525209904 CET	49927	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.525258064 CET	443	49927	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.525449038 CET	49927	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.525449038 CET	49927	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.525501013 CET	443	49927	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.565730095 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.565891027 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.565975904 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.565975904 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.566003084 CET	49923	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.566009045 CET	443	49923	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.567975044 CET	49928	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.568010092 CET	443	49928	13.107.246.45	192.168.2.4
Oct 31, 2024 22:21:36.568140984 CET	49928	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.568239927 CET	49928	443	192.168.2.4	13.107.246.45
Oct 31, 2024 22:21:36.568258047 CET	443	49928	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 22:20:14.797964096 CET	53	53920	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:14.798049927 CET	53	52435	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:16.423837900 CET	53	56937	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:16.706808090 CET	51933	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:16.707043886 CET	52284	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:16.713671923 CET	53	51933	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:16.717243910 CET	53	52284	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:18.745277882 CET	55356	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:18.745832920 CET	64230	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:19.529051065 CET	53	55356	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:19.529067993 CET	53	64230	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:19.775417089 CET	56538	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:19.775595903 CET	64874	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:19.784907103 CET	53	64874	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:19.785239935 CET	53	56538	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:23.348386049 CET	62516	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:23.348541975 CET	57682	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:23.358402967 CET	53	62516	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:23.359796047 CET	53	57682	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:24.712985992 CET	60001	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:24.712985992 CET	63898	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:24.720216990 CET	53	63898	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:24.723671913 CET	53	60001	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:26.353511095 CET	56126	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:26.354358912 CET	53315	53	192.168.2.4	1.1.1.1
Oct 31, 2024 22:20:26.361577034 CET	53	56126	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:26.364010096 CET	53	53315	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:31.948611975 CET	138	138	192.168.2.4	192.168.2.255
Oct 31, 2024 22:20:33.879976988 CET	53	54302	1.1.1.1	192.168.2.4
Oct 31, 2024 22:20:52.817404032 CET	53	50664	1.1.1.1	192.168.2.4
Oct 31, 2024 22:21:14.282897949 CET	53	64222	1.1.1.1	192.168.2.4
Oct 31, 2024 22:21:15.931826115 CET	53	52540	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 22:20:16.706808090 CET	192.168.2.4	1.1.1.1	0xc49b	Standard query (0)	qltuh.lyraevega.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:16.707043886 CET	192.168.2.4	1.1.1.1	0xe3eb	Standard query (0)	qltuh.lyraevega.com	65	IN (0x0001)	false
Oct 31, 2024 22:20:18.745277882 CET	192.168.2.4	1.1.1.1	0x5767	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:18.745832920 CET	192.168.2.4	1.1.1.1	0x9fdc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 22:20:19.775417089 CET	192.168.2.4	1.1.1.1	0x165e	Standard query (0)	qltuh.everestpeak.top	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:19.775595903 CET	192.168.2.4	1.1.1.1	0x377a	Standard query (0)	qltuh.everestpeak.top	65	IN (0x0001)	false
Oct 31, 2024 22:20:23.348386049 CET	192.168.2.4	1.1.1.1	0x5b4a	Standard query (0)	qltuh.everestpeak.top	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:23.348541975 CET	192.168.2.4	1.1.1.1	0xc9e3	Standard query (0)	qltuh.everestpeak.top	65	IN (0x0001)	false
Oct 31, 2024 22:20:24.712985992 CET	192.168.2.4	1.1.1.1	0x1e3e	Standard query (0)	cdnstatic.everestpeak.top	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:24.712985992 CET	192.168.2.4	1.1.1.1	0x9065	Standard query (0)	cdnstatic.everestpeak.top	65	IN (0x0001)	false
Oct 31, 2024 22:20:26.353511095 CET	192.168.2.4	1.1.1.1	0xe399	Standard query (0)	cdnstatic.everestpeak.top	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:26.354358912 CET	192.168.2.4	1.1.1.1	0x4aad	Standard query (0)	cdnstatic.everestpeak.top	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 22:20:16.713671923 CET	1.1.1.1	192.168.2.4	0xc49b	No error (0)	qltuh.lyraevega.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:16.713671923 CET	1.1.1.1	192.168.2.4	0xc49b	No error (0)	qltuh.lyraevega.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:16.717243910 CET	1.1.1.1	192.168.2.4	0xe3eb	No error (0)	qltuh.lyraevega.com			65	IN (0x0001)	false
Oct 31, 2024 22:20:19.529051065 CET	1.1.1.1	192.168.2.4	0x5767	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:19.529067993 CET	1.1.1.1	192.168.2.4	0x9fdc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 22:20:19.784907103 CET	1.1.1.1	192.168.2.4	0x377a	No error (0)	qltuh.everestpeak.top			65	IN (0x0001)	false
Oct 31, 2024 22:20:19.785239935 CET	1.1.1.1	192.168.2.4	0x165e	No error (0)	qltuh.everestpeak.top		172.67.131.236	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:19.785239935 CET	1.1.1.1	192.168.2.4	0x165e	No error (0)	qltuh.everestpeak.top		104.21.12.31	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:23.358402967 CET	1.1.1.1	192.168.2.4	0x5b4a	No error (0)	qltuh.everestpeak.top		172.67.131.236	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:23.358402967 CET	1.1.1.1	192.168.2.4	0x5b4a	No error (0)	qltuh.everestpeak.top		104.21.12.31	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:23.359796047 CET	1.1.1.1	192.168.2.4	0xc9e3	No error (0)	qltuh.everestpeak.top			65	IN (0x0001)	false
Oct 31, 2024 22:20:24.720216990 CET	1.1.1.1	192.168.2.4	0x9065	No error (0)	cdnstatic.everestpeak.top			65	IN (0x0001)	false
Oct 31, 2024 22:20:24.723671913 CET	1.1.1.1	192.168.2.4	0x1e3e	No error (0)	cdnstatic.everestpeak.top		104.21.12.31	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:24.723671913 CET	1.1.1.1	192.168.2.4	0x1e3e	No error (0)	cdnstatic.everestpeak.top		172.67.131.236	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:26.361577034 CET	1.1.1.1	192.168.2.4	0xe399	No error (0)	cdnstatic.everestpeak.top		172.67.131.236	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:26.361577034 CET	1.1.1.1	192.168.2.4	0xe399	No error (0)	cdnstatic.everestpeak.top		104.21.12.31	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:26.364010096 CET	1.1.1.1	192.168.2.4	0x4aad	No error (0)	cdnstatic.everestpeak.top			65	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.27	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.38	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.37	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:28.384517908 CET	1.1.1.1	192.168.2.4	0x56b7	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.39	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:29.262382030 CET	1.1.1.1	192.168.2.4	0x9966	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 22:20:29.262382030 CET	1.1.1.1	192.168.2.4	0x9966	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:20:44.134844065 CET	1.1.1.1	192.168.2.4	0x6b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 22:20:44.134844065 CET	1.1.1.1	192.168.2.4	0x6b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:21:07.945844889 CET	1.1.1.1	192.168.2.4	0xf562	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 22:21:07.945844889 CET	1.1.1.1	192.168.2.4	0xf562	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:21:09.470560074 CET	1.1.1.1	192.168.2.4	0x173f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 22:21:09.470560074 CET	1.1.1.1	192.168.2.4	0x173f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 22:21:27.599133015 CET	1.1.1.1	192.168.2.4	0x784f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 22:21:27.599133015 CET	1.1.1.1	192.168.2.4	0x784f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

qltuh.lyraevega.com

qltuh.everestpeak.top

fs.microsoft.com

https:

cdnstatic.everestpeak.top

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	188.114.97.3	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:18 UTC	718	OUT	GET /?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g HTTP/1.1 Host: qltuh.lyraevega.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:19 UTC	1324	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 21:20:18 GMT Content-Length: 0 Connection: close location: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 set-cookie: CHiI7Gh3GUyTa8XGgNqDyQ=1; max-age=345600; path=/; samesite=lax set-cookie: __pl=8d5fd63b-ae91-4c7a-bb19-b1b3482260f9; expires=Sat, 31 Oct 2026 21:20:18 GMT; path=/; samesite=lax set-cookie: __cap=1; max-age=3600; path=/; samesite=lax cache-control: max-age=0, no-cache, no-store, must-revalidate accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ByddAfD8Vs3oSYXJwbf9rgXHonSuO9MF0REb54AGuh2O5XwQo8kqjRNPGt0TGJFGwJgUeucbRBLydFAN9oHzWi%2BDrUzK%2Bd0kpj%2BgprmYTgDuNmwHGV3onyLkIIf37Xa0QkIVlnuY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b032b950316c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1618&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1296&delivery_rate=1753026&cwnd=246&unsent_bytes=0&cid=aeff2aeb472801cf&ts=788&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 21:20:20 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=156322 Date: Thu, 31 Oct 2024 21:20:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:21 UTC	828	OUT	GET /space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:21 UTC	831	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ip5vv%2BuWu%2B2N4fwLRxazwNU3PrqrXpNqu0YkQuzAxfCixxoYaoC4e0y6NA255jI3jcnnPyGd1uUJll59hbPxCTRV0qrdjPsnY4yEiSqkwODUkA%2B2AaWZY%2FWOE%2BB8KXW%2BWCRWAvpZ09Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b0453bff485f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1093&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1406&delivery_rate=2583407&cwnd=251&unsent_bytes=0&cid=d0aff1beb2964419&ts=612&x=0"
2024-10-31 21:20:21 UTC	538	IN	Data Raw: 32 33 38 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 34 34 64 32 31 35 30 38 62 64 35 62 62 31 65 63 31 32 64 36 32 33 62 39 65 35 66 33 35 31 30 22 20 6e 61 6d 65 3d 22 70 75 73 68 73 64 6b 22 2f 3e 0a 3c 74 69 74 6c 65 20 69 64 3d 22 74 69 74 6c 65 22 3e 39 63 39 33 61 62 37 32 2d 62 30 63 62 2d 34 37 30 36 2d 39 36 62 66 2d 39 66 35 62 65 30 39 65 35 30 37 61 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 Data Ascii: 2386<!DOCTYPE html><html lang="en"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"/><meta content="f44d21508bd5bb1ec12d623b9e5f3510" name="pushsdk"/><title id="title">9c93ab72-b0cb-4706-96bf-9f5be09e507a</title><meta cont
2024-10-31 21:20:21 UTC	1369	IN	Data Raw: 68 2d 69 63 6f 6e 2e 70 6e 67 22 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 20 72 65 6c 3d 22 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 2f 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2d 31 36 78 31 36 2e 70 6e 67 22 20 72 65 6c 3d 22 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 2f 3e 0a 3c 6c 69 6e 6b 20 63 6f 6c 6f 72 3d 22 23 35 62 62 61 64 35 22 20 68 72 65 66 3d 22 61 73 73 65 74 73 2f 73 61 66 Data Ascii: h-icon.png" rel="apple-touch-icon" sizes="180x180"/><link href="assets/favicon-32x32.png" rel="icon" sizes="32x32" type="image/png"/><link href="assets/favicon-16x16.png" rel="icon" sizes="16x16" type="image/png"/><link color="#5bbad5" href="assets/saf
2024-10-31 21:20:21 UTC	1369	IN	Data Raw: 2c 32 2e 31 2c 32 33 2e 39 2c 31 2e 35 2c 33 35 2e 37 63 2d 30 2e 35 2c 39 2e 36 2d 31 2e 37 2c 31 39 2e 35 2d 34 2e 32 2c 32 38 2e 38 20 63 2d 30 2e 33 2c 31 2e 32 2d 31 2c 32 2e 31 2d 32 2c 32 2e 38 63 2d 32 35 2e 35 2c 31 36 2e 39 2d 35 36 2e 32 2c 32 35 2d 38 36 2e 36 2c 32 35 73 2d 36 31 2e 32 2d 38 2e 31 2d 38 36 2e 36 2d 32 35 63 2d 31 2d 30 2e 37 2d 31 2e 37 2d 31 2e 36 2d 32 2d 32 2e 38 63 2d 32 2e 35 2d 39 2e 33 2d 33 2e 37 2d 31 39 2e 31 2d 34 2e 32 2d 32 38 2e 38 20 63 2d 30 2e 36 2d 31 31 2e 38 2d 30 2e 32 2d 32 34 2c 31 2e 35 2d 33 35 2e 37 63 30 2e 39 2d 36 2e 34 2c 32 2e 37 2d 31 35 2e 38 2c 36 2d 32 32 2e 31 63 2d 31 2e 34 2d 34 2e 32 2d 32 2e 34 2d 38 2e 36 2d 33 2e 32 2d 31 33 63 2d 30 2e 33 2d 31 2e 34 2c 30 2e 31 2d 32 2e 37 2c 30 2e Data Ascii: ,2.1,23.9,1.5,35.7c-0.5,9.6-1.7,19.5-4.2,28.8 c-0.3,1.2-1,2.1-2,2.8c-25.5,16.9-56.2,25-86.6,25s-61.2-8.1-86.6-25c-1-0.7-1.7-1.6-2-2.8c-2.5-9.3-3.7-19.1-4.2-28.8 c-0.6-11.8-0.2-24,1.5-35.7c0.9-6.4,2.7-15.8,6-22.1c-1.4-4.2-2.4-8.6-3.2-13c-0.3-1.4,0.1-2.7,0.
2024-10-31 21:20:21 UTC	1369	IN	Data Raw: 31 2e 34 2c 33 35 2c 36 2e 37 2c 33 35 2c 32 35 2e 32 76 33 35 2e 33 43 31 37 37 2e 34 2c 32 30 33 2e 33 2c 33 39 2e 36 2c 32 30 33 2e 33 2c 33 39 2e 36 2c 31 36 30 2e 36 4c 33 39 2e 36 2c 31 36 30 2e 36 7a 22 3e 0a 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 64 61 78 42 4b 79 22 20 64 3d 22 4d 31 34 35 2e 33 2c 31 30 35 2e 32 63 2d 32 2e 39 2c 34 2e 32 2d 37 2e 39 2c 37 2d 31 32 2e 34 2c 38 2e 38 63 2d 37 2e 35 2c 33 2d 31 36 2e 32 2c 34 2e 31 2d 32 34 2e 33 2c 34 2e 31 73 2d 31 36 2e 38 2d 31 2e 32 2d 32 34 2e 33 2d 34 2e 31 20 63 2d 34 2e 35 2d 31 2e 38 2d 39 2e 35 2d 34 2e 36 2d 31 32 2e 34 2d 38 2e 38 63 2d 38 2e 32 2c 30 2e 39 2d 31 38 2e 35 2c 33 2d 32 33 2e 37 2c 39 63 2d 32 2e 37 2c 33 2e 32 2d 33 2e 37 2c 37 2d 33 2e 37 2c 31 Data Ascii: 1.4,35,6.7,35,25.2v35.3C177.4,203.3,39.6,203.3,39.6,160.6L39.6,160.6z"></path><path class="daxBKy" d="M145.3,105.2c-2.9,4.2-7.9,7-12.4,8.8c-7.5,3-16.2,4.1-24.3,4.1s-16.8-1.2-24.3-4.1 c-4.5-1.8-9.5-4.6-12.4-8.8c-8.2,0.9-18.5,3-23.7,9c-2.7,3.2-3.7,7-3.7,1
2024-10-31 21:20:21 UTC	1369	IN	Data Raw: 2e 33 2c 30 2d 31 31 2e 34 2c 31 38 2e 39 2d 31 31 2e 34 2c 31 30 2e 32 53 37 32 2e 33 2c 33 2c 37 38 2e 36 2c 33 20 4c 37 38 2e 36 2c 33 7a 22 3e 0a 3c 2f 70 61 74 68 3e 0a 3c 2f 67 3e 0a 3c 67 20 69 64 3d 22 65 79 65 45 72 72 6f 72 22 3e 0a 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 35 6a 48 36 73 22 20 68 65 69 67 68 74 3d 22 38 2e 31 22 20 77 69 64 74 68 3d 22 34 31 2e 38 22 20 79 3d 22 30 2e 36 22 3e 3c 2f 72 65 63 74 3e 0a 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 35 6a 48 36 73 22 20 68 65 69 67 68 74 3d 22 38 2e 31 22 20 77 69 64 74 68 3d 22 34 31 2e 38 22 20 78 3d 22 34 38 2e 34 22 20 79 3d 22 30 2e 36 22 3e 3c 2f 72 65 63 74 3e 0a 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a 3c 21 2d 2d 20 4d 4f 55 54 48 20 2d 2d 3e 0a 3c 73 76 67 20 69 64 3d 22 6d 6f 75 Data Ascii: .3,0-11.4,18.9-11.4,10.2S72.3,3,78.6,3 L78.6,3z"></path></g><g id="eyeError"><rect class="c5jH6s" height="8.1" width="41.8" y="0.6"></rect><rect class="c5jH6s" height="8.1" width="41.8" x="48.4" y="0.6"></rect></g></svg>... MOUTH --><svg id="mou
2024-10-31 21:20:21 UTC	1369	IN	Data Raw: 33 2d 34 2e 31 2d 33 2e 34 2d 36 2e 31 63 2d 31 2e 37 2d 33 2e 32 2d 33 2e 34 2d 36 2e 35 2d 35 2e 31 2d 39 2e 37 63 2d 30 2e 34 2d 30 2e 38 2d 30 2e 34 2d 31 2e 36 2c 30 2e 31 2d 32 2e 34 63 31 2e 35 2d 32 2e 35 2c 31 2e 36 2d 35 2e 38 2c 31 2e 32 2d 38 2e 36 43 31 2e 39 2c 38 2e 34 2c 31 2e 32 2c 35 2e 32 2c 30 2e 35 2c 34 2e 31 20 4c 30 2e 35 2c 34 2e 31 7a 22 3e 0a 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 35 6a 48 36 73 22 20 64 3d 22 4d 32 2e 34 2c 32 2e 36 63 38 2e 36 2c 37 2c 32 30 2e 35 2c 32 33 2e 31 2c 32 34 2e 32 2c 33 30 2e 31 63 2d 31 2e 37 2c 37 2d 31 31 2e 37 2c 37 2e 34 2d 31 33 2e 32 2c 36 2e 31 43 31 31 2e 39 2c 33 37 2e 35 2c 32 2e 39 2c 31 39 2e 37 2c 32 2e 39 2c 31 39 2e 37 20 43 36 2e 37 2c 31 33 2e 34 2c 33 Data Ascii: 3-4.1-3.4-6.1c-1.7-3.2-3.4-6.5-5.1-9.7c-0.4-0.8-0.4-1.6,0.1-2.4c1.5-2.5,1.6-5.8,1.2-8.6C1.9,8.4,1.2,5.2,0.5,4.1 L0.5,4.1z"></path><path class="c5jH6s" d="M2.4,2.6c8.6,7,20.5,23.1,24.2,30.1c-1.7,7-11.7,7.4-13.2,6.1C11.9,37.5,2.9,19.7,2.9,19.7 C6.7,13.4,3
2024-10-31 21:20:21 UTC	1369	IN	Data Raw: 48 36 73 22 20 64 3d 22 4d 31 31 30 2e 32 2c 34 2e 38 63 32 37 2e 35 2c 33 38 2e 35 2d 32 36 2e 36 2c 39 35 2d 34 38 2e 39 2c 39 35 73 2d 37 36 2e 34 2d 35 36 2e 36 2d 34 38 2e 39 2d 39 35 63 31 34 2e 31 2c 35 2c 33 30 2e 39 2c 37 2e 39 2c 34 38 2e 39 2c 37 2e 39 53 39 36 2e 31 2c 39 2e 38 2c 31 31 30 2e 32 2c 34 2e 38 20 4c 31 31 30 2e 32 2c 34 2e 38 7a 22 3e 0a 3c 2f 70 61 74 68 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 35 6a 48 36 73 22 20 64 3d 22 4d 31 31 30 2e 32 2c 34 2e 38 63 31 33 2e 31 2c 31 38 2e 33 2c 37 2e 37 2c 34 30 2e 38 2d 34 2c 35 39 2e 33 63 2d 31 37 2e 33 2d 34 2e 38 2d 32 31 2e 31 2d 39 2e 38 2d 32 32 2e 39 2d 32 30 2e 38 63 2d 32 2e 33 2d 31 34 2d 31 35 2e 38 2d 31 38 2e 34 2d 32 32 2d 31 38 2e 31 20 63 2d 36 2e 32 2d 30 2e 33 Data Ascii: H6s" d="M110.2,4.8c27.5,38.5-26.6,95-48.9,95s-76.4-56.6-48.9-95c14.1,5,30.9,7.9,48.9,7.9S96.1,9.8,110.2,4.8 L110.2,4.8z"></path><path class="c5jH6s" d="M110.2,4.8c13.1,18.3,7.7,40.8-4,59.3c-17.3-4.8-21.1-9.8-22.9-20.8c-2.3-14-15.8-18.4-22-18.1 c-6.2-0.3
2024-10-31 21:20:21 UTC	350	IN	Data Raw: 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 72 53 68 61 64 6f 77 22 20 64 3d 22 4d 33 37 2e 33 2c 30 63 32 30 2e 34 2c 30 2c 33 37 2c 32 2e 31 2c 33 37 2c 34 2e 36 73 2d 31 36 2e 36 2c 34 2e 36 2d 33 37 2c 34 2e 36 73 2d 33 37 2d 32 2e 31 2d 33 37 2d 34 2e 36 43 30 2e 34 2c 32 2c 31 36 2e 39 2c 30 2c 33 37 2e 33 2c 30 4c 33 37 2e 33 2c 30 7a 22 3e 0a 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 61 73 73 65 74 73 2f 6d 61 69 6e 2e 6a 73 3f 76 3d 33 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 Data Ascii: 2000/svg"><path class="rShadow" d="M37.3,0c20.4,0,37,2.1,37,4.6s-16.6,4.6-37,4.6s-37-2.1-37-4.6C0.4,2,16.9,0,37.3,0L37.3,0z"></path></svg></div></div></div></div></div></div><script src="assets/main.js?v=3" type="text/javascript"></script><scri
2024-10-31 21:20:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 21:20:22 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=156377 Date: Thu, 31 Oct 2024 21:20:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 21:20:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:23 UTC	737	OUT	GET /space-robot/assets/style.css?v=5 HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:23 UTC	863	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:23 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: W/"67125b8f-15f1" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4787 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TgCONNIDGhnSoDum1sYKXFICOsd1oXyx68WjUySeCU1Os%2BpZjkFxkluFPKgVgQYpJzT0SI5eBEG3JPnquG2EpNWhjd4dGwSXmiZz%2FQU6pqX0yocGTRxhl9N00pl9O%2FLWV7DP0gfW2Oo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b0510e36e853-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1866&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1315&delivery_rate=1583378&cwnd=251&unsent_bytes=0&cid=b05962faa5fb6498&ts=152&x=0"
2024-10-31 21:20:23 UTC	506	IN	Data Raw: 31 35 66 31 0d 0a 2e 71 49 6b 35 62 71 2c 62 6f 64 79 2c 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 62 6f 64 79 2c 23 72 53 68 61 64 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 23 62 6f 64 79 2c 23 72 42 6f 64 79 42 6f 78 2c 23 72 53 68 61 64 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 62 6f 64 79 2c 23 72 48 65 61 64 42 6f 78 7b 74 6f 70 3a 30 7d 2e 64 38 55 4e 74 46 2c 2e 66 58 63 38 6a 51 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 Data Ascii: 15f1.qIk5bq,body,html{height:100%;width:100%}#body,#rShadow{position:absolute;left:0;right:0}#body,#rBodyBox,#rShadow{position:absolute}#body,#rHeadBox{top:0}.d8UNtF,.fXc8jQ{text-align:center}@font-face{font-family:Roboto;font-style:normal;font-weight:3
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 32 2c 75 2b 32 31 39 31 2c 75 2b 32 31 39 33 2c 75 2b 32 32 31 32 2c 75 2b 32 32 31 35 2c 75 2b 66 65 66 66 2c 75 2b 66 66 66 64 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f Data Ascii: 2,u+2191,u+2193,u+2212,u+2215,u+feff,u+fffd}@font-face{font-family:Roboto;font-style:normal;font-weight:300;src:local("Roboto Light"),local("Roboto-Light"),url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format("woff2");unico
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 36 30 70 78 7d 2e 4f 56 78 36 4b 31 3e 2e 4b 30 76 44 32 61 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 47 67 65 71 63 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 7d 2e 6a 76 37 7a 56 46 7b 63 6f 6c 6f 72 3a 23 63 33 63 33 63 33 7d 2e 6b 42 61 7a 51 48 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 70 61 64 64 69 6e 67 3a 34 30 70 78 20 30 20 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 77 Data Ascii: splay:flex;flex-direction:column;align-items:center;width:60px}.OVx6K1>.K0vD2a{width:40px;height:40px}.Ggeqcp{font-size:10px;font-weight:500;margin-top:5px;color:#fff}}.jv7zVF{color:#c3c3c3}.kBazQH{justify-content:flex-end;padding:40px 0 0;flex-shrink:0;w
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 64 2e 43 68 72 6f 6d 65 2e 78 56 76 59 34 5a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6d 6f 75 74 68 2c 2e 4f 32 45 62 4a 4d 7b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 36 70 78 3b 74 6f 70 3a 37 37 70 78 7d 2e 4a 34 76 5a 7a 33 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 37 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 2d 39 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 30 30 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 43 61 79 7a 44 33 2c 2e 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 4a 50 31 64 Data Ascii: d.Chrome.xVvY4Z{display:none}#mouth,.O2EbJM{width:15px;height:6px;top:77px}.J4vZz3{width:32px;height:32px;border-radius:50%;background:rgba(0,0,0,.7);position:absolute;right:0;top:-9px;z-index:9000;cursor:pointer}.CayzD3,.hide{display:none!important}.JP1d
2024-10-31 21:20:23 UTC	1012	IN	Data Raw: 20 73 74 65 61 6d 7b 30 25 2c 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 34 30 30 25 20 30 7d 7d 2e 74 6e 4b 41 39 35 2e 75 65 76 49 52 32 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 35 70 78 29 3b 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 35 70 78 29 7d 2e 66 58 63 38 6a 51 7b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 33 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 Data Ascii: steam{0%,100%{background-position:0 0}50%{background-position:400% 0}}.tnKA95.uevIR2:after{-webkit-filter:blur(15px);filter:blur(15px)}.fXc8jQ{width:100%;text-transform:uppercase;font-weight:700;font-size:23px;margin:0}@media screen and (max-width:600px)
2024-10-31 21:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:23 UTC	717	OUT	GET /space-robot/assets/trls.js HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:23 UTC	886	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:23 GMT Content-Type: application/javascript Content-Length: 12109 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-2f4d" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4787 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAK8tZogrdLKhbEp10p7zObJWsUMXy4J1Htmt822Az0g4aonL1TuYPi8I3TEZWQ4EzXvy9h94p3wm9gR136d2i8zy89Jw37KYxF8LOKBFFLtAdpkuxe63Otlx5g2ut0vNxNUDpvhqm8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b0511eb56b19-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1269&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1295&delivery_rate=2257209&cwnd=251&unsent_bytes=0&cid=a0a8844300e1c725&ts=177&x=0"
2024-10-31 21:20:23 UTC	483	IN	Data Raw: 76 61 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 0d 0a 20 20 20 20 73 6f 75 72 63 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 43 6c 69 63 6b 20 22 41 6c 6c 6f 77 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 50 72 65 73 73 20 74 68 65 20 22 41 6c 6c 6f 77 22 20 62 75 74 74 6f 6e 20 74 6f 20 76 65 72 69 66 79 20 79 6f 75 5c 27 72 65 20 68 75 6d 61 6e 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 65 6e 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 43 6c 69 63 6b 20 22 41 6c 6c 6f 77 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 50 72 65 73 73 20 74 68 65 20 22 41 6c 6c 6f 77 22 20 62 75 74 74 6f 6e 20 74 6f 20 76 65 72 69 66 79 20 79 6f 75 5c 27 72 65 20 68 75 6d 61 6e 21 27 Data Ascii: var translation = { source: { title: 'Click "Allow"', text1: 'Press the "Allow" button to verify you\'re human!' }, en: { title: 'Click "Allow"', text1: 'Press the "Allow" button to verify you\'re human!'
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 62 61 73 c4 b1 6e 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 c4 b0 6e 73 61 6e 20 6f 6c 64 75 c4 9f 75 6e 75 7a 75 20 74 c9 99 73 64 69 71 6c c9 99 6d c9 99 6b 20 c3 bc c3 a7 c3 bc 6e 20 22 c4 b0 63 61 7a c9 99 20 76 65 72 69 6e 22 20 64 c3 bc 79 6d c9 99 73 69 6e 69 20 62 61 73 c4 b1 6e 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 62 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 d0 9d d0 b0 d1 86 d1 96 d1 81 d0 bd d1 96 d1 86 d0 b5 20 22 d0 94 d0 b0 d0 b7 d0 b2 d0 be d0 bb d1 96 d1 86 d1 8c 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 d0 9d d0 b0 d1 86 d1 96 d1 81 d0 bd d1 96 d1 86 d0 b5 20 d0 ba d0 bd d0 be d0 bf d0 ba d1 83 20 22 d0 94 d0 b0 d0 b7 d0 b2 d0 be d0 bb d1 96 d1 86 d1 8c 22 2c 20 d0 Data Ascii: basn', text1: 'nsan olduunuzu tsdiqlmk n "caz verin" dymsini basn!' }, be: { title: ' ""', text1: ' "",
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 53 63 68 61 6c 74 66 6c c3 a4 63 68 65 20 22 5a 75 6c 61 73 73 65 6e 22 2c 20 75 6d 20 7a 75 20 62 65 73 74 c3 a4 74 69 67 65 6e 2c 20 64 61 73 73 20 53 69 65 20 65 69 6e 20 4d 65 6e 73 63 68 20 73 69 6e 64 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 69 64 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 4b 6c 69 6b 20 22 49 7a 69 6e 6b 61 6e 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 54 65 6b 61 6e 20 74 6f 6d 62 6f 6c 20 22 49 7a 69 6e 6b 61 6e 22 20 75 6e 74 75 6b 20 6d 65 6d 76 65 72 69 66 69 6b 61 73 69 20 62 61 68 77 61 20 41 6e 64 61 20 61 64 61 6c 61 68 20 6d 61 6e 75 73 69 61 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 65 6c 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 ce 9a ce ac ce bd Data Ascii: Schaltflche "Zulassen", um zu besttigen, dass Sie ein Mensch sind!' }, id: { title: 'Klik "Izinkan"', text1: 'Tekan tombol "Izinkan" untuk memverifikasi bahwa Anda adalah manusia!' }, el: { title: "
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 20 27 d7 9c d7 97 d7 a5 20 d7 a2 d7 9c 20 22 d7 90 d7 a4 d7 a9 d7 a8 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 d7 9c d7 97 d7 a5 20 d7 a2 d7 9c 20 d7 9b d7 a4 d7 aa d7 95 d7 a8 20 22 d7 90 d7 a4 d7 a9 d7 a8 22 20 d7 9b d7 93 d7 99 20 d7 9c d7 95 d7 95 d7 93 d7 90 20 d7 a9 d7 90 d7 aa d7 94 20 d7 90 d7 a0 d7 95 d7 a9 d7 99 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 68 72 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 4b 6c 69 6b 6e 69 74 65 20 44 6f 70 75 73 74 69 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 22 4b 6c 69 6b 6e 69 74 65 20 c2 ab 44 6f 70 75 73 74 69 c2 bb 20 64 61 20 62 69 73 74 65 20 70 6f 74 76 72 64 69 6c 69 20 64 61 20 6e 69 73 74 65 20 72 6f 62 6f 74 21 22 0d 0a 20 20 20 20 7d 2c 0d Data Ascii: ' ""', text1: ' "" !' }, hr: { title: "Kliknite Dopusti", text1: "Kliknite Dopusti da biste potvrdili da niste robot!" },
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: b1 d2 9b d1 81 d0 b0 d1 82 20 d0 b5 d1 82 d1 83 c2 bb 20 d1 82 d2 af d0 b9 d0 bc d0 b5 d1 81 d1 96 d0 bd 20 d0 b1 d0 b0 d1 81 d1 8b d2 a3 d1 8b d0 b7 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 d0 90 d0 b4 d0 b0 d0 bc 20 d0 b5 d0 ba d0 b5 d0 bd d1 96 d2 a3 d1 96 d0 b7 d0 b4 d1 96 20 d1 80 d0 b0 d1 81 d1 82 d0 b0 d1 83 20 d2 af d1 88 d1 96 d0 bd 20 22 d0 a0 d2 b1 d2 9b d1 81 d0 b0 d1 82 20 d0 b5 d1 82 d1 83 22 20 d1 82 d2 af d0 b9 d0 bc d0 b5 d1 81 d1 96 d0 bd 20 d0 b1 d0 b0 d1 81 d1 8b d2 a3 d1 8b d0 b7 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 6b 6f 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 ed 97 88 ec 9a a9 ec 9d 84 20 eb 88 84 eb a5 b4 ec 84 b8 ec 9a 94 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 Data Ascii: ', text1: ' " " !' }, ko: { title: " ", text1:
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: e1 80 b8 e1 80 96 e1 80 bc e1 80 85 e1 80 ba e1 80 80 e1 80 bc e1 80 b1 e1 80 ac e1 80 84 e1 80 ba e1 80 b8 20 e1 80 a1 e1 80 90 e1 80 8a e1 80 ba e1 80 95 e1 80 bc e1 80 af e1 80 9b e1 80 94 e1 80 ba 20 22 e1 80 81 e1 80 bd e1 80 84 e1 80 b7 e1 80 ba e1 80 95 e1 80 bc e1 80 af 22 20 e1 80 81 e1 80 9c e1 80 af e1 80 90 e1 80 ba e1 80 80 e1 80 ad e1 80 af 20 e1 80 94 e1 80 be e1 80 ad e1 80 95 e1 80 ba e1 80 95 e1 80 ab e1 81 8b 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 6e 6f 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 4b 6c 69 6b 6b 20 54 69 6c 6c 61 74 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 54 72 79 6b 6b 20 70 c3 a5 20 22 54 69 6c 6c 61 74 22 2d 6b 6e 61 70 70 65 6e 20 66 6f 72 20 c3 a5 20 62 65 6b 72 65 66 74 Data Ascii: "" ' }, no: { title: "Klikk Tillat", text1: 'Trykk p "Tillat"-knappen for bekreft
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: b7 d1 80 d0 b5 d1 88 d0 b8 d1 82 d1 8c 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 22 d0 9d d0 b0 d0 b6 d0 bc d0 b8 d1 82 d0 b5 20 c2 ab d0 a0 d0 b0 d0 b7 d1 80 d0 b5 d1 88 d0 b8 d1 82 d1 8c c2 bb 20 d0 b4 d0 bb d1 8f 20 d0 bf d0 be d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b6 d0 b4 d0 b5 d0 bd d0 b8 d1 8f 20 d1 87 d1 82 d0 be 20 d0 92 d1 8b 20 d0 bd d0 b5 20 d1 80 d0 be d0 b1 d0 be d1 82 21 22 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 73 6b 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 4b 6c 69 6b 6e 69 74 65 20 6e 61 20 50 6f 76 6f 6c 69 c5 a5 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 4b 6c 69 6b 6e 75 74 c3 ad 6d 20 6e 61 20 74 6c 61 c4 8d 69 64 6c 6f 20 22 50 6f 76 6f 6c 69 c5 a5 22 20 70 6f 74 76 72 c4 8f 74 Data Ascii: "', text1: " !" }, sk: { title: "Kliknite na Povoli", text1: 'Kliknutm na tlaidlo "Povoli" potvrt
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: d0 be d0 bb d0 b8 d1 82 d0 b8 22 2c 20 d1 89 d0 be d0 b1 20 d0 bf d1 96 d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b4 d0 b8 d1 82 d0 b8 2c 20 d1 89 d0 be 20 d0 b2 d0 b8 20 d0 bb d1 8e d0 b4 d0 b8 d0 bd d0 b0 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 75 7a 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 22 52 75 78 73 61 74 20 62 65 72 69 73 68 22 20 74 75 67 6d 61 73 69 6e 69 20 62 6f 73 69 6e 67 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 49 6c 74 69 6d 6f 73 2c 20 22 52 75 78 73 61 74 20 62 65 72 69 73 68 22 20 74 75 67 6d 61 73 69 6e 69 20 62 6f 73 69 6e 67 2c 20 62 75 20 6f 72 71 61 6c 69 20 73 69 7a 20 69 6e 73 6f 6e 20 65 6b 61 6e 6c 69 67 69 6e 67 69 7a 6e 69 20 74 61 73 64 69 71 6c 61 6e 67 21 27 0d 0a 20 20 20 20 7d 2c Data Ascii: ", , !' }, uz: { title: '"Ruxsat berish" tugmasini bosing', text1: 'Iltimos, "Ruxsat berish" tugmasini bosing, bu orqali siz inson ekanligingizni tasdiqlang!' },
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 32 20 3c 20 74 2e 6c 65 6e 67 74 68 20 26 26 20 28 74 20 3d 20 74 5b 30 5d 20 2b 20 74 5b 31 5d 29 2c 20 74 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 5f 74 65 78 74 28 74 2c 20 65 2c 20 69 29 20 7b 0d 0a 76 61 72 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 23 22 20 2b 20 65 29 3b 0d 0a 69 66 20 28 30 20 3c 20 61 2e 6c 65 6e 67 74 68 29 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 6f 20 3d 20 30 3b 20 6f 20 3c 20 61 2e 6c 65 6e 67 74 68 3b 20 6f 2b 2b 29 20 6e 75 6c 6c 20 21 3d 20 61 5b 6f 5d 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3f 20 61 5b 6f 5d 2e 70 6c 61 63 Data Ascii: ; } else { return 2 < t.length && (t = t[0] + t[1]), t }}function replace_text(t, e, i) {var a = document.querySelectorAll("#" + e);if (0 < a.length) for (var o = 0; o < a.length; o++) null != a[o].placeholder ? a[o].plac
2024-10-31 21:20:23 UTC	674	IN	Data Raw: 0d 0a 7d 0d 0a 74 20 3d 20 74 20 7c 7c 20 22 64 6f 63 52 65 61 64 79 22 2c 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 3b 0d 0a 76 61 72 20 6f 20 3d 20 5b 5d 2c 0d 0a 20 20 20 20 6e 20 3d 20 21 31 2c 0d 0a 20 20 20 20 6c 20 3d 20 21 31 3b 0d 0a 65 5b 74 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 20 3f 20 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 28 65 29 0d 0a 20 20 20 20 7d 2c 20 31 29 20 3a 20 28 6f 2e 70 75 73 68 28 7b 0d 0a 20 20 20 20 20 20 20 20 66 6e 3a 20 74 2c 0d 0a 20 20 20 20 20 20 20 20 63 74 78 3a 20 65 0d 0a 20 20 20 20 7d 29 2c 20 76 6f 69 64 28 22 63 6f 6d 70 6c 65 74 65 22 20 3d 3d 3d 20 64 6f 63 75 6d Data Ascii: }t = t \|\| "docReady", e = e \|\| window;var o = [], n = !1, l = !1;e[t] = function(t, e) { return n ? void setTimeout(function() { t(e) }, 1) : (o.push({ fn: t, ctx: e }), void("complete" === docum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49753	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:23 UTC	780	OUT	GET /space-robot/assets/corner.png HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:23 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:23 GMT Content-Type: image/png Content-Length: 300 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-12c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4787 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lk3uzqJt3f%2B%2FzLAI%2BawS74H5GC%2FdwLcGfzY0rrNWgMPXJRRoPnZM8J4hOwjZt2ljrsYW3nSK0H3jZScrAZ%2F6pIh5tA4vx3QbCZEAmQ0TjM4jdCvgPgnU9cHXf%2FnzcGAV4fjko%2FSeQ20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b051bc25e80f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1137&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1358&delivery_rate=2456318&cwnd=251&unsent_bytes=0&cid=37374d7907db6aad&ts=147&x=0"
2024-10-31 21:20:23 UTC	300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 2c 08 03 00 00 00 29 5a aa 33 00 00 00 3c 50 4c 54 45 00 00 00 95 95 95 95 95 95 95 95 95 95 95 95 97 97 97 95 95 95 da da da 95 95 95 ff ff ff ff ff ff 95 95 95 96 96 96 c8 c8 c8 95 95 95 95 95 95 95 95 95 95 95 95 ff ff ff ed ed ed 65 21 4a b1 00 00 00 12 74 52 4e 53 00 04 12 32 1b 88 55 fd aa df 20 01 77 fd 98 44 25 1f 30 6b 02 03 00 00 00 8d 49 44 41 54 38 cb 8d ca 37 16 83 40 10 05 c1 8f 11 32 8b b0 f7 bf 2b 8f a8 33 7a 2a ae fc be 47 4d 6e d5 1d b6 0b db 85 ed e2 1b f1 8d c0 77 c0 f6 dc f5 c3 eb fd 78 cf cf 34 96 37 99 ed 99 ed d9 37 d9 37 19 6c cf 6c cf 6c cb be c9 be c9 be c9 be c9 be c9 be c9 b6 3d b3 3d b3 41 f6 4d f6 4d f6 4d f6 4d f6 4d ae 6e b2 6f b2 6f b2 6f 72 6d 93 7d 93 Data Ascii: PNGIHDR,,)Z3<PLTEe!JtRNS2U wD%0kIDAT87@2+3z*GMnwx4777lll==AMMMMMnooorm}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:23 UTC	721	OUT	GET /space-robot/assets/main.js?v=3 HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:23 UTC	893	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:23 GMT Content-Type: application/javascript Content-Length: 4693 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-1255" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4787 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2FGe0EkosLcfgi3Rd7xcUfKEuZBLa0XLwoNyUw2lFLp7Q1ZT7f0%2BKpBoemXT9Bz4NcbqgtsJdGxogPzf4Mwcwra6Owp0hgRn%2FTwZuWKcJcpddNOH2CB%2Bf2n64oZnVZjmR8iyyhQIW10%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b051bfa14672-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1055&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1299&delivery_rate=2503025&cwnd=249&unsent_bytes=0&cid=501a1ddaf1e0e562&ts=149&x=0"
2024-10-31 21:20:23 UTC	476	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 29 7d 29 2c 35 65 33 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 72 6d 4c 65 66 74 22 29 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 72 6d 52 69 67 68 74 22 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 79 65 4e 6f 72 6d 61 6c 22 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 79 65 42 6c 69 6e 6b 22 29 2c 64 3d 64 Data Ascii: document.addEventListener("DOMContentLoaded",(function(){I(),setInterval((function(){I()}),5e3);var e=document.getElementById("armLeft"),t=document.getElementById("armRight"),s=document.getElementById("eyeNormal"),i=document.getElementById("eyeBlink"),d=d
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 69 73 74 2e 72 65 6d 6f 76 65 28 22 72 41 6e 69 6d 22 29 2c 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 72 41 6e 69 6d 22 29 2c 6f 3d 21 31 29 3a 28 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 72 41 6e 69 6d 22 29 2c 64 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 72 41 6e 69 6d 22 29 2c 6f 3d 21 30 29 7d 29 2c 34 65 33 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 64 65 22 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 68 6f 77 42 6c 6f 63 6b 22 29 7d 29 2c 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 63 6c 61 73 73 4c 69 Data Ascii: ist.remove("rAnim"),d.classList.remove("rAnim"),o=!1):(c.classList.add("rAnim"),d.classList.add("rAnim"),o=!0)}),4e3),setInterval((function(){setTimeout((function(){s.classList.add("hide"),i.classList.add("showBlock")}),0),setTimeout((function(){s.classLi
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 6e 74 65 72 76 61 6c 28 73 29 2c 75 28 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 72 6d 52 69 67 68 74 41 6e 69 6d 22 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 72 6d 4c 65 66 74 41 6e 69 6d 22 29 2c 76 3d 21 31 7d 29 2c 31 37 35 30 29 7d 7d 7d 29 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 74 72 79 20 7b 20 76 61 72 20 69 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 20 28 77 20 3d 20 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 6e 64 72 6f 69 64 22 29 20 3e 20 2d 31 29 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 62 Data Ascii: nterval(s),u(),t.classList.remove("armRightAnim"),e.classList.remove("armLeftAnim"),v=!1}),1750)}}}));document.addEventListener("DOMContentLoaded", function(){ try { var i = navigator.userAgent; (w = i.toLowerCase().indexOf("android") > -1) && document.b
2024-10-31 21:20:23 UTC	1369	IN	Data Raw: 76 65 72 4f 66 66 73 65 74 20 3d 20 69 2e 69 6e 64 65 78 4f 66 28 22 50 75 66 66 69 6e 22 29 29 20 3f 20 28 22 50 75 66 66 69 6e 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 50 75 66 66 69 6e 22 29 29 20 3a 20 2d 31 20 21 3d 20 28 76 65 72 4f 66 66 73 65 74 20 3d 20 69 2e 69 6e 64 65 78 4f 66 28 22 53 69 6c 6b 22 29 29 20 3f 20 28 22 53 69 6c 6b 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 53 69 6c 6b 22 29 29 20 3a 20 2d 31 20 21 3d 20 28 76 65 72 4f 66 66 73 65 74 20 3d 20 69 2e 69 6e 64 65 78 4f 66 28 22 56 69 76 61 6c 64 69 22 29 29 20 3f 20 28 22 56 69 76 61 6c 64 69 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 Data Ascii: verOffset = i.indexOf("Puffin")) ? ("Puffin", document.body.classList.add("Puffin")) : -1 != (verOffset = i.indexOf("Silk")) ? ("Silk", document.body.classList.add("Silk")) : -1 != (verOffset = i.indexOf("Vivaldi")) ? ("Vivaldi", document.body.classList.a
2024-10-31 21:20:23 UTC	110	IN	Data Raw: 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 46 69 72 65 66 6f 78 22 29 29 20 3a 20 28 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 45 78 70 6c 6f 72 65 72 22 29 29 3b 20 7d 20 63 61 74 63 68 20 7b 20 7d 20 7d 29 3b Data Ascii: dy.classList.add("Firefox")) : ("Internet Explorer", document.body.classList.add("Explorer")); } catch { } });

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49759	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:24 UTC	724	OUT	GET /shared-js/assets/static-pl.js?v=5 HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:24 UTC	893	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:24 GMT Content-Type: application/javascript Content-Length: 3784 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-ec8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4787 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LK3rcuyenMuQjJw75rzlOqkaaGJdymFV16xowQsmtbPcX5VPxqhna%2BmQIGrIe3hM%2BmoW3%2BubFnvAHZJbx%2FTJFIWfevwT5QLRVcuZ6VAZk%2Fev5aNy4xtNQoJdZzvE8ugZ7jJBlav2070%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b059f817ddae-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1163&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1302&delivery_rate=1851662&cwnd=32&unsent_bytes=0&cid=878bc94a720a2a18&ts=145&x=0"
2024-10-31 21:20:24 UTC	476	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 57 68 65 6e 20 4a 53 20 6e 6f 74 20 6c 6f 61 64 65 64 0d 0a 0d 0a 20 20 2f 2f 20 55 6e 63 6f 6d 6d 65 6e 74 20 74 6f 20 75 73 65 20 72 65 67 75 6c 61 72 20 72 65 64 69 72 65 63 74 20 77 69 74 68 6f 75 74 20 73 73 70 0d 0a 20 20 2f 2f 20 63 6f 6e 73 74 20 74 72 61 66 66 69 63 42 61 63 6b 20 3d 20 27 68 74 74 70 73 3a 2f 2f 6d 62 74 72 6b 31 2e 63 6f 6d 2f 63 6c 69 63 6b 2e 70 68 70 3f 6b 65 79 3d 37 65 66 31 71 64 31 6c 76 66 74 64 6a 75 34 6e 39 38 35 73 26 74 72 61 63 6b 65 72 3d 70 75 73 68 6c 69 6e 6b 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 7b 72 65 61 73 6f 6e 7d 27 3b 0d 0a 20 20 2f 2f 20 63 6f 6e 73 74 20 74 72 61 66 66 69 63 42 61 63 6b 54 72 61 63 6b 20 3d 20 Data Ascii: (function () { // Redirect When JS not loaded // Uncomment to use regular redirect without ssp // const trafficBack = 'https://mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-{reason}'; // const trafficBackTrack =
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 61 66 66 69 63 42 61 63 6b 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 6e 65 77 73 27 3b 0d 0a 0d 0a 20 20 2f 2f 20 4f 70 74 69 6f 6e 73 20 66 6f 72 20 77 6f 72 6b 61 72 6f 75 6e 64 73 0d 0a 20 20 63 6f 6e 73 74 20 65 64 67 20 3d 20 74 72 75 65 3b 0d 0a 20 20 63 6f 6e 73 74 20 66 75 6c 6c 73 63 72 65 65 6e 20 3d 20 74 72 75 65 3b 0d 0a 20 20 63 6f 6e 73 74 20 64 65 66 61 75 6c 74 54 69 6d 65 6f 75 74 20 3d 20 31 38 30 30 3b 0d 0a 20 20 2f 2f 20 53 65 72 76 69 63 65 57 6f 72 6b 65 72 4a 53 20 66 69 78 65 64 20 6e 61 6d 65 20 28 6f 6e 6c 79 20 66 6f 72 20 61 70 70 73 70 6f 74 20 6c 61 6e 64 69 6e 67 73 29 0d 0a 20 20 63 6f 6e 73 74 20 73 77 20 3d 20 27 27 3b 0d 0a 0d 0a 20 20 2f 2f 20 55 73 65 20 43 44 4e 20 73 74 61 74 69 63 Data Ascii: afficBack = 'https://www.bing.com/news'; // Options for workarounds const edg = true; const fullscreen = true; const defaultTimeout = 1800; // ServiceWorkerJS fixed name (only for appspot landings) const sw = ''; // Use CDN static
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 4e 61 6d 65 28 27 75 74 6d 5f 63 61 6d 70 61 69 67 6e 27 29 20 7c 7c 20 27 27 3b 0d 0a 20 20 6c 65 74 20 6e 72 69 64 20 3d 20 67 65 74 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 27 6e 72 69 64 27 29 20 7c 7c 20 27 27 3b 0d 0a 0d 0a 20 20 6c 65 74 20 64 6f 6d 61 69 6e 20 3d 20 64 65 66 61 75 6c 74 4a 53 44 6f 6d 61 69 6e 3b 0d 0a 20 20 69 66 20 28 75 73 65 43 64 6e 53 74 61 74 69 63 20 26 26 20 61 70 70 73 70 6f 74 20 21 3d 20 27 74 72 75 65 27 29 20 7b 0d 0a 20 20 20 20 20 20 6c 65 74 20 63 75 72 72 65 6e 74 48 6f 73 74 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 0d 0a 20 20 20 20 20 20 6c 65 74 20 70 61 72 74 73 20 3d 20 63 75 72 72 65 6e 74 48 6f 73 74 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 Data Ascii: Name('utm_campaign') \|\| ''; let nrid = getParameterByName('nrid') \|\| ''; let domain = defaultJSDomain; if (useCdnStatic && appspot != 'true') { let currentHost = window.location.host; let parts = currentHost.split('.'); if
2024-10-31 21:20:24 UTC	570	IN	Data Raw: 69 63 6b 5f 69 64 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 6c 69 63 6b 49 64 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 73 75 62 5f 69 64 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 72 61 63 6b 65 72 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 61 70 70 73 70 6f 74 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 70 70 73 70 6f 74 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 64 3d 27 20 2b 20 28 75 73 65 43 64 6e 53 74 61 74 69 63 20 3f 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 3a 20 27 27 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 74 69 6d 65 6f 75 74 3d 27 20 2b 20 74 69 6d 65 6f 75 74 0d 0a 20 20 20 20 20 20 2b 20 27 26 74 62 3d 27 20 2b 20 Data Ascii: ick_id=' + encodeURIComponent(clickId) + '&sub_id=' + encodeURIComponent(tracker) + '&appspot=' + encodeURIComponent(appspot) + '&d=' + (useCdnStatic ? encodeURIComponent(domain) : '') + '&timeout=' + timeout + '&tb=' +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49760	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:24 UTC	371	OUT	GET /space-robot/assets/trls.js HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:24 UTC	888	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:24 GMT Content-Type: application/javascript Content-Length: 12109 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-2f4d" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4788 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t14NHEylMJoB2f0XNLTqQHjnDVnokG0BTgAqXzb3nMspKoc6UE%2BGa24RYjtonD1LE541tnyHKwQP4saTOjoWtSif6T8NqSFRh4Tr4EUPBFwcfQbhow%2BrIpRiwYQpTnptpz8dzHAsYiQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b05a186ae6fe-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2056&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=949&delivery_rate=1365393&cwnd=57&unsent_bytes=0&cid=7fe3ef540c947d95&ts=148&x=0"
2024-10-31 21:20:24 UTC	481	IN	Data Raw: 76 61 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 3d 20 7b 0d 0a 20 20 20 20 73 6f 75 72 63 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 43 6c 69 63 6b 20 22 41 6c 6c 6f 77 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 50 72 65 73 73 20 74 68 65 20 22 41 6c 6c 6f 77 22 20 62 75 74 74 6f 6e 20 74 6f 20 76 65 72 69 66 79 20 79 6f 75 5c 27 72 65 20 68 75 6d 61 6e 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 65 6e 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 43 6c 69 63 6b 20 22 41 6c 6c 6f 77 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 50 72 65 73 73 20 74 68 65 20 22 41 6c 6c 6f 77 22 20 62 75 74 74 6f 6e 20 74 6f 20 76 65 72 69 66 79 20 79 6f 75 5c 27 72 65 20 68 75 6d 61 6e 21 27 Data Ascii: var translation = { source: { title: 'Click "Allow"', text1: 'Press the "Allow" button to verify you\'re human!' }, en: { title: 'Click "Allow"', text1: 'Press the "Allow" button to verify you\'re human!'
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 69 20 62 61 73 c4 b1 6e 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 c4 b0 6e 73 61 6e 20 6f 6c 64 75 c4 9f 75 6e 75 7a 75 20 74 c9 99 73 64 69 71 6c c9 99 6d c9 99 6b 20 c3 bc c3 a7 c3 bc 6e 20 22 c4 b0 63 61 7a c9 99 20 76 65 72 69 6e 22 20 64 c3 bc 79 6d c9 99 73 69 6e 69 20 62 61 73 c4 b1 6e 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 62 65 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 d0 9d d0 b0 d1 86 d1 96 d1 81 d0 bd d1 96 d1 86 d0 b5 20 22 d0 94 d0 b0 d0 b7 d0 b2 d0 be d0 bb d1 96 d1 86 d1 8c 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 d0 9d d0 b0 d1 86 d1 96 d1 81 d0 bd d1 96 d1 86 d0 b5 20 d0 ba d0 bd d0 be d0 bf d0 ba d1 83 20 22 d0 94 d0 b0 d0 b7 d0 b2 d0 be d0 bb d1 96 d1 86 d1 8c 22 2c Data Ascii: i basn', text1: 'nsan olduunuzu tsdiqlmk n "caz verin" dymsini basn!' }, be: { title: ' ""', text1: ' "",
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 65 20 53 63 68 61 6c 74 66 6c c3 a4 63 68 65 20 22 5a 75 6c 61 73 73 65 6e 22 2c 20 75 6d 20 7a 75 20 62 65 73 74 c3 a4 74 69 67 65 6e 2c 20 64 61 73 73 20 53 69 65 20 65 69 6e 20 4d 65 6e 73 63 68 20 73 69 6e 64 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 69 64 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 4b 6c 69 6b 20 22 49 7a 69 6e 6b 61 6e 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 54 65 6b 61 6e 20 74 6f 6d 62 6f 6c 20 22 49 7a 69 6e 6b 61 6e 22 20 75 6e 74 75 6b 20 6d 65 6d 76 65 72 69 66 69 6b 61 73 69 20 62 61 68 77 61 20 41 6e 64 61 20 61 64 61 6c 61 68 20 6d 61 6e 75 73 69 61 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 65 6c 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 ce 9a ce ac Data Ascii: e Schaltflche "Zulassen", um zu besttigen, dass Sie ein Mensch sind!' }, id: { title: 'Klik "Izinkan"', text1: 'Tekan tombol "Izinkan" untuk memverifikasi bahwa Anda adalah manusia!' }, el: { title: "
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 65 3a 20 27 d7 9c d7 97 d7 a5 20 d7 a2 d7 9c 20 22 d7 90 d7 a4 d7 a9 d7 a8 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 d7 9c d7 97 d7 a5 20 d7 a2 d7 9c 20 d7 9b d7 a4 d7 aa d7 95 d7 a8 20 22 d7 90 d7 a4 d7 a9 d7 a8 22 20 d7 9b d7 93 d7 99 20 d7 9c d7 95 d7 95 d7 93 d7 90 20 d7 a9 d7 90 d7 aa d7 94 20 d7 90 d7 a0 d7 95 d7 a9 d7 99 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 68 72 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 4b 6c 69 6b 6e 69 74 65 20 44 6f 70 75 73 74 69 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 22 4b 6c 69 6b 6e 69 74 65 20 c2 ab 44 6f 70 75 73 74 69 c2 bb 20 64 61 20 62 69 73 74 65 20 70 6f 74 76 72 64 69 6c 69 20 64 61 20 6e 69 73 74 65 20 72 6f 62 6f 74 21 22 0d 0a 20 20 20 20 7d Data Ascii: e: ' ""', text1: ' "" !' }, hr: { title: "Kliknite Dopusti", text1: "Kliknite Dopusti da biste potvrdili da niste robot!" }
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: a0 d2 b1 d2 9b d1 81 d0 b0 d1 82 20 d0 b5 d1 82 d1 83 c2 bb 20 d1 82 d2 af d0 b9 d0 bc d0 b5 d1 81 d1 96 d0 bd 20 d0 b1 d0 b0 d1 81 d1 8b d2 a3 d1 8b d0 b7 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 d0 90 d0 b4 d0 b0 d0 bc 20 d0 b5 d0 ba d0 b5 d0 bd d1 96 d2 a3 d1 96 d0 b7 d0 b4 d1 96 20 d1 80 d0 b0 d1 81 d1 82 d0 b0 d1 83 20 d2 af d1 88 d1 96 d0 bd 20 22 d0 a0 d2 b1 d2 9b d1 81 d0 b0 d1 82 20 d0 b5 d1 82 d1 83 22 20 d1 82 d2 af d0 b9 d0 bc d0 b5 d1 81 d1 96 d0 bd 20 d0 b1 d0 b0 d1 81 d1 8b d2 a3 d1 8b d0 b7 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 6b 6f 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 ed 97 88 ec 9a a9 ec 9d 84 20 eb 88 84 eb a5 b4 ec 84 b8 ec 9a 94 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 Data Ascii: ', text1: ' " " !' }, ko: { title: " ", text1
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 80 ac e1 80 b8 e1 80 96 e1 80 bc e1 80 85 e1 80 ba e1 80 80 e1 80 bc e1 80 b1 e1 80 ac e1 80 84 e1 80 ba e1 80 b8 20 e1 80 a1 e1 80 90 e1 80 8a e1 80 ba e1 80 95 e1 80 bc e1 80 af e1 80 9b e1 80 94 e1 80 ba 20 22 e1 80 81 e1 80 bd e1 80 84 e1 80 b7 e1 80 ba e1 80 95 e1 80 bc e1 80 af 22 20 e1 80 81 e1 80 9c e1 80 af e1 80 90 e1 80 ba e1 80 80 e1 80 ad e1 80 af 20 e1 80 94 e1 80 be e1 80 ad e1 80 95 e1 80 ba e1 80 95 e1 80 ab e1 81 8b 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 6e 6f 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 4b 6c 69 6b 6b 20 54 69 6c 6c 61 74 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 54 72 79 6b 6b 20 70 c3 a5 20 22 54 69 6c 6c 61 74 22 2d 6b 6e 61 70 70 65 6e 20 66 6f 72 20 c3 a5 20 62 65 6b 72 65 Data Ascii: "" ' }, no: { title: "Klikk Tillat", text1: 'Trykk p "Tillat"-knappen for bekre
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: b0 d0 b7 d1 80 d0 b5 d1 88 d0 b8 d1 82 d1 8c 22 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 22 d0 9d d0 b0 d0 b6 d0 bc d0 b8 d1 82 d0 b5 20 c2 ab d0 a0 d0 b0 d0 b7 d1 80 d0 b5 d1 88 d0 b8 d1 82 d1 8c c2 bb 20 d0 b4 d0 bb d1 8f 20 d0 bf d0 be d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b6 d0 b4 d0 b5 d0 bd d0 b8 d1 8f 20 d1 87 d1 82 d0 be 20 d0 92 d1 8b 20 d0 bd d0 b5 20 d1 80 d0 be d0 b1 d0 be d1 82 21 22 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 73 6b 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 22 4b 6c 69 6b 6e 69 74 65 20 6e 61 20 50 6f 76 6f 6c 69 c5 a5 22 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 4b 6c 69 6b 6e 75 74 c3 ad 6d 20 6e 61 20 74 6c 61 c4 8d 69 64 6c 6f 20 22 50 6f 76 6f 6c 69 c5 a5 22 20 70 6f 74 76 72 c4 Data Ascii: "', text1: " !" }, sk: { title: "Kliknite na Povoli", text1: 'Kliknutm na tlaidlo "Povoli" potvr
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: d0 b2 d0 be d0 bb d0 b8 d1 82 d0 b8 22 2c 20 d1 89 d0 be d0 b1 20 d0 bf d1 96 d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b4 d0 b8 d1 82 d0 b8 2c 20 d1 89 d0 be 20 d0 b2 d0 b8 20 d0 bb d1 8e d0 b4 d0 b8 d0 bd d0 b0 21 27 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 75 7a 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3a 20 27 22 52 75 78 73 61 74 20 62 65 72 69 73 68 22 20 74 75 67 6d 61 73 69 6e 69 20 62 6f 73 69 6e 67 27 2c 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 31 3a 20 27 49 6c 74 69 6d 6f 73 2c 20 22 52 75 78 73 61 74 20 62 65 72 69 73 68 22 20 74 75 67 6d 61 73 69 6e 69 20 62 6f 73 69 6e 67 2c 20 62 75 20 6f 72 71 61 6c 69 20 73 69 7a 20 69 6e 73 6f 6e 20 65 6b 61 6e 6c 69 67 69 6e 67 69 7a 6e 69 20 74 61 73 64 69 71 6c 61 6e 67 21 27 0d 0a 20 20 20 20 Data Ascii: ", , !' }, uz: { title: '"Ruxsat berish" tugmasini bosing', text1: 'Iltimos, "Ruxsat berish" tugmasini bosing, bu orqali siz inson ekanligingizni tasdiqlang!'
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 57 27 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 32 20 3c 20 74 2e 6c 65 6e 67 74 68 20 26 26 20 28 74 20 3d 20 74 5b 30 5d 20 2b 20 74 5b 31 5d 29 2c 20 74 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 5f 74 65 78 74 28 74 2c 20 65 2c 20 69 29 20 7b 0d 0a 76 61 72 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 23 22 20 2b 20 65 29 3b 0d 0a 69 66 20 28 30 20 3c 20 61 2e 6c 65 6e 67 74 68 29 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 6f 20 3d 20 30 3b 20 6f 20 3c 20 61 2e 6c 65 6e 67 74 68 3b 20 6f 2b 2b 29 20 6e 75 6c 6c 20 21 3d 20 61 5b 6f 5d 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3f 20 61 5b 6f 5d 2e 70 6c Data Ascii: W'; } else { return 2 < t.length && (t = t[0] + t[1]), t }}function replace_text(t, e, i) {var a = document.querySelectorAll("#" + e);if (0 < a.length) for (var o = 0; o < a.length; o++) null != a[o].placeholder ? a[o].pl
2024-10-31 21:20:24 UTC	676	IN	Data Raw: 28 29 0d 0a 7d 0d 0a 74 20 3d 20 74 20 7c 7c 20 22 64 6f 63 52 65 61 64 79 22 2c 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 3b 0d 0a 76 61 72 20 6f 20 3d 20 5b 5d 2c 0d 0a 20 20 20 20 6e 20 3d 20 21 31 2c 0d 0a 20 20 20 20 6c 20 3d 20 21 31 3b 0d 0a 65 5b 74 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 2c 20 65 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 20 3f 20 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 28 65 29 0d 0a 20 20 20 20 7d 2c 20 31 29 20 3a 20 28 6f 2e 70 75 73 68 28 7b 0d 0a 20 20 20 20 20 20 20 20 66 6e 3a 20 74 2c 0d 0a 20 20 20 20 20 20 20 20 63 74 78 3a 20 65 0d 0a 20 20 20 20 7d 29 2c 20 76 6f 69 64 28 22 63 6f 6d 70 6c 65 74 65 22 20 3d 3d 3d 20 64 6f 63 Data Ascii: ()}t = t \|\| "docReady", e = e \|\| window;var o = [], n = !1, l = !1;e[t] = function(t, e) { return n ? void setTimeout(function() { t(e) }, 1) : (o.push({ fn: t, ctx: e }), void("complete" === doc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:24 UTC	374	OUT	GET /space-robot/assets/corner.png HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:24 UTC	875	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:24 GMT Content-Type: image/png Content-Length: 300 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-12c" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4788 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YTdFKXE1nSsKy6QqhFT44NBqsZ7YafB%2BujA2mcyLTtByfvAIilpuYSOLM1ufXcCn6apJ4%2Fs6D5CeoV5xInkeBpkCn8CNDfSuDQLbYgGATkor41H2J2CVMLkkHSon3TQYPQI%2BzvIkMAE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b05a6b212cde-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1318&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=952&delivery_rate=2142011&cwnd=251&unsent_bytes=0&cid=3a0a3604f4b1c789&ts=154&x=0"
2024-10-31 21:20:24 UTC	300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 2c 08 03 00 00 00 29 5a aa 33 00 00 00 3c 50 4c 54 45 00 00 00 95 95 95 95 95 95 95 95 95 95 95 95 97 97 97 95 95 95 da da da 95 95 95 ff ff ff ff ff ff 95 95 95 96 96 96 c8 c8 c8 95 95 95 95 95 95 95 95 95 95 95 95 ff ff ff ed ed ed 65 21 4a b1 00 00 00 12 74 52 4e 53 00 04 12 32 1b 88 55 fd aa df 20 01 77 fd 98 44 25 1f 30 6b 02 03 00 00 00 8d 49 44 41 54 38 cb 8d ca 37 16 83 40 10 05 c1 8f 11 32 8b b0 f7 bf 2b 8f a8 33 7a 2a ae fc be 47 4d 6e d5 1d b6 0b db 85 ed e2 1b f1 8d c0 77 c0 f6 dc f5 c3 eb fd 78 cf cf 34 96 37 99 ed 99 ed d9 37 d9 37 19 6c cf 6c cf 6c cb be c9 be c9 be c9 be c9 be c9 be c9 b6 3d b3 3d b3 41 f6 4d f6 4d f6 4d f6 4d f6 4d ae 6e b2 6f b2 6f b2 6f 72 6d 93 7d 93 Data Ascii: PNGIHDR,,)Z3<PLTEe!JtRNS2U wD%0kIDAT87@2+3z*GMnwx4777lll==AMMMMMnooorm}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49762	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:24 UTC	375	OUT	GET /space-robot/assets/main.js?v=3 HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:24 UTC	892	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:24 GMT Content-Type: application/javascript Content-Length: 4693 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-1255" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4788 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmnxiiBalaYqmrEpLewX3pmTnv%2BM8GA9twiDgA2k%2FKLv16c%2F4JnGXcLE567u6XfjqRRk6ecvhR0CMzY8ZtBG8z%2F5pF8Ip5ttUFvGwFjmjYjrWSDNJQ9M7yNEXhP1BwXDhH4KrC4v34Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b05abdb645ff-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1521&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=953&delivery_rate=2661764&cwnd=251&unsent_bytes=0&cid=60f24f4d85f1cadc&ts=155&x=0"
2024-10-31 21:20:24 UTC	477	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 29 7d 29 2c 35 65 33 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 72 6d 4c 65 66 74 22 29 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 72 6d 52 69 67 68 74 22 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 79 65 4e 6f 72 6d 61 6c 22 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 79 65 42 6c 69 6e 6b 22 29 2c 64 3d 64 Data Ascii: document.addEventListener("DOMContentLoaded",(function(){I(),setInterval((function(){I()}),5e3);var e=document.getElementById("armLeft"),t=document.getElementById("armRight"),s=document.getElementById("eyeNormal"),i=document.getElementById("eyeBlink"),d=d
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 73 74 2e 72 65 6d 6f 76 65 28 22 72 41 6e 69 6d 22 29 2c 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 72 41 6e 69 6d 22 29 2c 6f 3d 21 31 29 3a 28 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 72 41 6e 69 6d 22 29 2c 64 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 72 41 6e 69 6d 22 29 2c 6f 3d 21 30 29 7d 29 2c 34 65 33 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 64 65 22 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 68 6f 77 42 6c 6f 63 6b 22 29 7d 29 2c 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 63 6c 61 73 73 4c 69 73 Data Ascii: st.remove("rAnim"),d.classList.remove("rAnim"),o=!1):(c.classList.add("rAnim"),d.classList.add("rAnim"),o=!0)}),4e3),setInterval((function(){setTimeout((function(){s.classList.add("hide"),i.classList.add("showBlock")}),0),setTimeout((function(){s.classLis
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 74 65 72 76 61 6c 28 73 29 2c 75 28 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 72 6d 52 69 67 68 74 41 6e 69 6d 22 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 72 6d 4c 65 66 74 41 6e 69 6d 22 29 2c 76 3d 21 31 7d 29 2c 31 37 35 30 29 7d 7d 7d 29 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 74 72 79 20 7b 20 76 61 72 20 69 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 20 28 77 20 3d 20 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 6e 64 72 6f 69 64 22 29 20 3e 20 2d 31 29 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 62 6f Data Ascii: terval(s),u(),t.classList.remove("armRightAnim"),e.classList.remove("armLeftAnim"),v=!1}),1750)}}}));document.addEventListener("DOMContentLoaded", function(){ try { var i = navigator.userAgent; (w = i.toLowerCase().indexOf("android") > -1) && document.bo
2024-10-31 21:20:24 UTC	1369	IN	Data Raw: 65 72 4f 66 66 73 65 74 20 3d 20 69 2e 69 6e 64 65 78 4f 66 28 22 50 75 66 66 69 6e 22 29 29 20 3f 20 28 22 50 75 66 66 69 6e 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 50 75 66 66 69 6e 22 29 29 20 3a 20 2d 31 20 21 3d 20 28 76 65 72 4f 66 66 73 65 74 20 3d 20 69 2e 69 6e 64 65 78 4f 66 28 22 53 69 6c 6b 22 29 29 20 3f 20 28 22 53 69 6c 6b 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 53 69 6c 6b 22 29 29 20 3a 20 2d 31 20 21 3d 20 28 76 65 72 4f 66 66 73 65 74 20 3d 20 69 2e 69 6e 64 65 78 4f 66 28 22 56 69 76 61 6c 64 69 22 29 29 20 3f 20 28 22 56 69 76 61 6c 64 69 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 Data Ascii: erOffset = i.indexOf("Puffin")) ? ("Puffin", document.body.classList.add("Puffin")) : -1 != (verOffset = i.indexOf("Silk")) ? ("Silk", document.body.classList.add("Silk")) : -1 != (verOffset = i.indexOf("Vivaldi")) ? ("Vivaldi", document.body.classList.ad
2024-10-31 21:20:24 UTC	109	IN	Data Raw: 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 46 69 72 65 66 6f 78 22 29 29 20 3a 20 28 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 45 78 70 6c 6f 72 65 72 22 29 29 3b 20 7d 20 63 61 74 63 68 20 7b 20 7d 20 7d 29 3b Data Ascii: y.classList.add("Firefox")) : ("Internet Explorer", document.body.classList.add("Explorer")); } catch { } });

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49768	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:25 UTC	378	OUT	GET /shared-js/assets/static-pl.js?v=5 HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:26 UTC	893	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:26 GMT Content-Type: application/javascript Content-Length: 3784 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-ec8" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4789 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bgDjDcOk8fbrDjlfm3vW%2FE%2FDUkEixaRBqhDtZemwIPOczZwXVJ1JAc5VhAUb3hUPe7oNTY3acD9yFIw4D05iEsvzg3nNXj%2BQSsnK%2FwJG5uRgt1YZFdLOJwEpg7NNrga8rUsS4%2BT7A8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b0628c134672-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1012&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=956&delivery_rate=2798067&cwnd=249&unsent_bytes=0&cid=52e8b059bf0e901c&ts=149&x=0"
2024-10-31 21:20:26 UTC	476	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 57 68 65 6e 20 4a 53 20 6e 6f 74 20 6c 6f 61 64 65 64 0d 0a 0d 0a 20 20 2f 2f 20 55 6e 63 6f 6d 6d 65 6e 74 20 74 6f 20 75 73 65 20 72 65 67 75 6c 61 72 20 72 65 64 69 72 65 63 74 20 77 69 74 68 6f 75 74 20 73 73 70 0d 0a 20 20 2f 2f 20 63 6f 6e 73 74 20 74 72 61 66 66 69 63 42 61 63 6b 20 3d 20 27 68 74 74 70 73 3a 2f 2f 6d 62 74 72 6b 31 2e 63 6f 6d 2f 63 6c 69 63 6b 2e 70 68 70 3f 6b 65 79 3d 37 65 66 31 71 64 31 6c 76 66 74 64 6a 75 34 6e 39 38 35 73 26 74 72 61 63 6b 65 72 3d 70 75 73 68 6c 69 6e 6b 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 7b 72 65 61 73 6f 6e 7d 27 3b 0d 0a 20 20 2f 2f 20 63 6f 6e 73 74 20 74 72 61 66 66 69 63 42 61 63 6b 54 72 61 63 6b 20 3d 20 Data Ascii: (function () { // Redirect When JS not loaded // Uncomment to use regular redirect without ssp // const trafficBack = 'https://mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-{reason}'; // const trafficBackTrack =
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 61 66 66 69 63 42 61 63 6b 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 6e 65 77 73 27 3b 0d 0a 0d 0a 20 20 2f 2f 20 4f 70 74 69 6f 6e 73 20 66 6f 72 20 77 6f 72 6b 61 72 6f 75 6e 64 73 0d 0a 20 20 63 6f 6e 73 74 20 65 64 67 20 3d 20 74 72 75 65 3b 0d 0a 20 20 63 6f 6e 73 74 20 66 75 6c 6c 73 63 72 65 65 6e 20 3d 20 74 72 75 65 3b 0d 0a 20 20 63 6f 6e 73 74 20 64 65 66 61 75 6c 74 54 69 6d 65 6f 75 74 20 3d 20 31 38 30 30 3b 0d 0a 20 20 2f 2f 20 53 65 72 76 69 63 65 57 6f 72 6b 65 72 4a 53 20 66 69 78 65 64 20 6e 61 6d 65 20 28 6f 6e 6c 79 20 66 6f 72 20 61 70 70 73 70 6f 74 20 6c 61 6e 64 69 6e 67 73 29 0d 0a 20 20 63 6f 6e 73 74 20 73 77 20 3d 20 27 27 3b 0d 0a 0d 0a 20 20 2f 2f 20 55 73 65 20 43 44 4e 20 73 74 61 74 69 63 Data Ascii: afficBack = 'https://www.bing.com/news'; // Options for workarounds const edg = true; const fullscreen = true; const defaultTimeout = 1800; // ServiceWorkerJS fixed name (only for appspot landings) const sw = ''; // Use CDN static
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 4e 61 6d 65 28 27 75 74 6d 5f 63 61 6d 70 61 69 67 6e 27 29 20 7c 7c 20 27 27 3b 0d 0a 20 20 6c 65 74 20 6e 72 69 64 20 3d 20 67 65 74 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 27 6e 72 69 64 27 29 20 7c 7c 20 27 27 3b 0d 0a 0d 0a 20 20 6c 65 74 20 64 6f 6d 61 69 6e 20 3d 20 64 65 66 61 75 6c 74 4a 53 44 6f 6d 61 69 6e 3b 0d 0a 20 20 69 66 20 28 75 73 65 43 64 6e 53 74 61 74 69 63 20 26 26 20 61 70 70 73 70 6f 74 20 21 3d 20 27 74 72 75 65 27 29 20 7b 0d 0a 20 20 20 20 20 20 6c 65 74 20 63 75 72 72 65 6e 74 48 6f 73 74 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 0d 0a 20 20 20 20 20 20 6c 65 74 20 70 61 72 74 73 20 3d 20 63 75 72 72 65 6e 74 48 6f 73 74 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 Data Ascii: Name('utm_campaign') \|\| ''; let nrid = getParameterByName('nrid') \|\| ''; let domain = defaultJSDomain; if (useCdnStatic && appspot != 'true') { let currentHost = window.location.host; let parts = currentHost.split('.'); if
2024-10-31 21:20:26 UTC	570	IN	Data Raw: 69 63 6b 5f 69 64 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 6c 69 63 6b 49 64 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 73 75 62 5f 69 64 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 72 61 63 6b 65 72 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 61 70 70 73 70 6f 74 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 70 70 73 70 6f 74 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 64 3d 27 20 2b 20 28 75 73 65 43 64 6e 53 74 61 74 69 63 20 3f 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 3a 20 27 27 29 0d 0a 20 20 20 20 20 20 2b 20 27 26 74 69 6d 65 6f 75 74 3d 27 20 2b 20 74 69 6d 65 6f 75 74 0d 0a 20 20 20 20 20 20 2b 20 27 26 74 62 3d 27 20 2b 20 Data Ascii: ick_id=' + encodeURIComponent(clickId) + '&sub_id=' + encodeURIComponent(tracker) + '&appspot=' + encodeURIComponent(appspot) + '&d=' + (useCdnStatic ? encodeURIComponent(domain) : '') + '&timeout=' + timeout + '&tb=' +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49767	104.21.12.31	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:25 UTC	773	OUT	GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&sub_id=&appspot=&d=https%3A%2F%2Fcdnstatic.everestpeak.top&timeout=1800&tb=true&nrid=8ef3ad173d6b44f8905002ffdf1d0e14 HTTP/1.1 Host: cdnstatic.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qltuh.everestpeak.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:26 UTC	1048	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: max-age=0, no-cache, no-store, must-revalidate accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version CF-Cache-Status: BYPASS Set-Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8; expires=Sat, 31 Oct 2026 21:20:26 GMT; path=/; secure; samesite=none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A9z7d7Z043q6C918Bnb3PD%2BxiNK0YQ71RIy79nDNpzGAfGR6eoOsiIBiKM29eZFoZPJiDz0imlKUOrK2Nq5hs%2BOLPqbQZCOXTNP8umgsumEyAor4tRO4YrbtdXF7kA0oCR%2FGp%2F3fjHWgY0Dy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b062890a2cbf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1249&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1351&delivery_rate=2427493&cwnd=248&unsent_bytes=0&cid=4eff678c579f636d&ts=281&x=0"
2024-10-31 21:20:26 UTC	321	IN	Data Raw: 37 63 34 36 0d 0a 63 6f 6e 73 74 20 61 30 5f 30 78 32 39 31 35 3d 5b 27 32 30 34 39 52 47 4a 61 78 45 27 2c 27 70 61 72 65 6e 74 4e 6f 64 65 27 2c 27 74 65 73 74 27 2c 27 6f 6e 50 65 72 6d 69 73 73 69 6f 6e 41 6c 6c 6f 77 65 64 27 2c 27 72 65 6c 6f 61 64 27 2c 27 61 73 73 69 67 6e 27 2c 27 63 6f 64 65 27 2c 27 32 36 32 30 38 31 72 71 4c 57 53 79 27 2c 27 6a 6f 69 6e 27 2c 27 63 6c 6f 73 65 73 74 27 2c 27 6c 61 6e 67 75 61 67 65 27 2c 27 61 6c 6c 6f 77 27 2c 27 67 65 74 54 6f 6b 65 6e 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 64 27 2c 27 73 74 61 74 75 73 27 2c 27 69 73 4d 6f 62 69 6c 65 27 2c 27 74 69 74 6c 65 27 2c 27 6f 6e 50 65 72 6d 69 73 73 69 6f 6e 44 65 66 61 75 6c 74 27 2c 27 32 34 6b 59 71 44 4b 69 27 2c 27 69 73 53 75 70 70 6f 72 74 65 64 27 2c 27 Data Ascii: 7c46const a0_0x2915=['2049RGJaxE','parentNode','test','onPermissionAllowed','reload','assign','code','262081rqLWSy','join','closest','language','allow','getToken','appendChild','status','isMobile','title','onPermissionDefault','24kYqDKi','isSupported','
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 55 6e 73 75 70 70 6f 72 74 65 64 27 2c 27 31 4e 54 6f 69 71 59 27 2c 27 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 27 2c 27 73 65 6e 64 27 2c 27 76 65 72 73 69 6f 6e 4e 75 6d 62 65 72 27 2c 27 64 69 73 61 6c 6c 6f 77 27 2c 27 69 6e 6e 65 72 48 54 4d 4c 27 2c 27 55 52 4c 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 61 70 70 6c 79 27 2c 27 34 36 35 38 38 44 6d 6a 71 67 74 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 2c 27 70 61 72 73 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 77 65 62 6b 69 74 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 27 2c 27 74 6f 4c 6f 77 65 72 43 61 73 65 27 2c 27 63 6c 6f 73 65 27 2c 27 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 27 2c 27 6d 73 52 65 71 75 65 73 74 46 75 6c Data Ascii: nNotificationUnsupported','1NToiqY','documentElement','send','versionNumber','disallow','innerHTML','URL','prototype','apply','46588Dmjqgt','permission','parse','querySelector','webkitRequestFullScreen','toLowerCase','close','preventDefault','msRequestFul
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 62 66 29 29 2a 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 32 34 37 39 64 39 28 30 78 31 61 39 29 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 34 37 39 64 39 28 30 78 31 64 31 29 29 2a 70 61 72 73 65 49 6e 74 28 5f 30 78 32 34 37 39 64 39 28 30 78 31 37 66 29 29 3b 69 66 28 5f 30 78 35 32 36 32 36 34 3d 3d 3d 5f 30 78 31 30 31 36 31 33 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 38 64 61 38 32 38 5b 27 70 75 73 68 27 5d 28 5f 30 78 38 64 61 38 32 38 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 33 65 33 36 33 32 29 7b 5f 30 78 38 64 61 38 32 38 5b 27 70 75 73 68 27 5d 28 5f 30 78 38 64 61 38 32 38 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 5f 30 78 32 39 31 35 2c 30 78 31 38 66 30 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: bf))-parseInt(_0x2479d9(0x1a9))+parseInt(_0x2479d9(0x1d1))parseInt(_0x2479d9(0x17f));if(_0x526264===_0x101613)break;else _0x8da828['push'](_0x8da828['shift']());}catch(_0x3e3632){_0x8da828['push'](_0x8da828['shift']());}}}(a0_0x2915,0x18f0a),function(){
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 6b 27 7d 2c 27 6d 6b 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 d1 81 d0 b0 d0 ba d0 b0 20 d0 b4 d0 b0 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 d0 9f d1 80 d0 b8 d0 ba d0 b0 d0 b6 d0 b8 20 d0 b8 d0 b7 d0 b2 d0 b5 d1 81 d1 82 d1 83 d0 b2 d0 b0 d1 9a d0 b0 27 2c 27 61 6c 6c 6f 77 27 3a 27 d0 94 d0 be d0 b7 d0 b2 d0 be d0 bb d0 b8 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 d0 91 d0 bb d0 be d0 ba d0 b8 d1 80 d0 b0 d1 98 27 7d 2c 27 64 61 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 69 6c 20 67 65 72 6e 65 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 56 69 73 65 20 6e 6f 74 69 66 69 6b 61 74 69 6f 6e 65 72 27 2c 27 61 6c 6c 6f 77 27 3a 27 54 69 6c 6c 61 64 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 65 72 27 7d 2c 27 6e 6c 27 3a Data Ascii: k'},'mk':{'title':'... ','permission':' ','allow':'','disallow':''},'da':{'title':'... vil gerne','permission':'Vise notifikationer','allow':'Tillad','disallow':'Bloker'},'nl':
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: a8 e0 ad 8d e0 ac a4 e0 ad 81 27 2c 27 61 6c 6c 6f 77 27 3a 27 e0 ac 85 e0 ac a8 e0 ad 81 e0 ac ae e0 ac a4 e0 ac bf 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 e0 ac 85 e0 ac ac e0 ac b0 e0 ad 8b e0 ac a7 20 e0 ac 95 e0 ac b0 e0 ac a8 e0 ad 8d e0 ac a4 e0 ad 81 27 7d 2c 27 6d 79 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 e1 80 80 20 e1 80 95 e1 80 bc e1 80 af e1 80 9c e1 80 af e1 80 95 e1 80 ba e1 80 9c e1 80 ad e1 80 af e1 80 9e e1 80 8a e1 80 ba e1 80 99 e1 80 be e1 80 ac 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 e1 80 9e e1 80 90 e1 80 ad e1 80 95 e1 80 b1 e1 80 b8 e1 80 81 e1 80 bb e1 80 80 e1 80 ba e1 80 99 e1 80 bb e1 80 ac e1 80 b8 20 e1 80 95 e1 80 bc e1 80 9b e1 80 94 e1 80 ba 27 2c 27 61 6c 6c 6f 77 27 3a 27 e1 80 81 e1 80 bd e1 80 84 Data Ascii: ','allow':'','disallow':' '},'my':{'title':'... ','permission':' ','allow':'
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 9c ec 9d 84 20 ec 9a 94 ec b2 ad ed 95 a9 eb 8b 88 eb 8b a4 2e 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 ec 95 8c eb a6 bc 20 ed 91 9c ec 8b 9c 27 2c 27 61 6c 6c 6f 77 27 3a 27 ed 97 88 ec 9a a9 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 ec b0 a8 eb 8b a8 27 7d 2c 27 63 73 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 79 c5 be 61 64 75 6a 65 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 5a 6f 62 72 61 7a 6f 76 61 74 20 6f 7a 6e c3 a1 6d 65 6e c3 ad 27 2c 27 61 6c 6c 6f 77 27 3a 27 50 6f 76 6f 6c 69 74 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 6f 76 61 74 27 7d 2c 27 63 79 27 3a 7b 27 74 69 74 6c 65 27 3a 27 4d 61 65 20 2e 2e 2e 20 65 69 73 69 61 75 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 44 61 6e 67 6f 73 20 68 79 73 62 79 Data Ascii: .','permission':' ','allow':'','disallow':''},'cs':{'title':'... vyaduje','permission':'Zobrazovat oznmen','allow':'Povolit','disallow':'Blokovat'},'cy':{'title':'Mae ... eisiau','permission':'Dangos hysby
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 74 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 6f 72 72 65 62 62 65 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 4d 6f 73 74 72 61 72 65 20 6c 65 20 6e 6f 74 69 66 69 63 68 65 27 2c 27 61 6c 6c 6f 77 27 3a 27 43 6f 6e 73 65 6e 74 69 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 63 63 61 27 7d 2c 27 66 69 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 70 79 79 74 c3 a4 c3 a4 20 6c 75 70 61 61 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 4e c3 a4 79 74 c3 a4 20 69 6c 6d 6f 69 74 75 6b 73 65 74 27 2c 27 61 6c 6c 6f 77 27 3a 27 53 61 6c 6c 69 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 45 73 74 c3 a4 27 7d 2c 27 6e 62 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 69 6c 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 56 69 73 20 76 61 72 Data Ascii: t':{'title':'... vorrebbe','permission':'Mostrare le notifiche','allow':'Consenti','disallow':'Blocca'},'fi':{'title':'... pyyt lupaa','permission':'Nyt ilmoitukset','allow':'Salli','disallow':'Est'},'nb':{'title':'... vil','permission':'Vis var
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 82 27 2c 27 61 6c 6c 6f 77 27 3a 27 e0 a4 85 e0 a4 a8 e0 a5 81 e0 a4 ae e0 a4 a4 e0 a4 bf 20 e0 a4 a6 e0 a5 87 e0 a4 82 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 e0 a4 ac e0 a5 8d e0 a4 b2 e0 a5 89 e0 a4 95 20 e0 a4 95 e0 a4 b0 e0 a5 87 e0 a4 82 27 7d 2c 27 6b 79 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 d0 b1 d1 83 d0 bb 20 d0 b0 d1 80 d0 b0 d0 ba d0 b5 d1 82 d1 82 d0 b5 d1 80 d0 b4 d0 b8 20 d0 b0 d1 82 d0 ba d0 b0 d1 80 d0 b0 d1 82 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 d0 91 d0 b8 d0 bb d0 b4 d0 b8 d1 80 d0 bc d0 b5 d0 bb d0 b5 d1 80 d0 b4 d0 b8 20 d0 ba d3 a9 d1 80 d1 81 d3 a9 d1 82 d2 af d2 af 27 2c 27 61 6c 6c 6f 77 27 3a 27 d0 a3 d1 80 d1 83 d0 ba d1 81 d0 b0 d1 82 20 d0 b1 d0 b5 d1 80 d2 af d2 af 27 2c 27 64 69 73 61 6c 6c 6f 77 27 Data Ascii: ','allow':' ','disallow':' '},'ky':{'title':'... ','permission':' ','allow':' ','disallow'
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: 3a 27 e8 a8 b1 e5 8f af e3 81 99 e3 82 8b 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 e3 83 96 e3 83 ad e3 83 83 e3 82 af 27 7d 2c 27 65 75 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 77 65 62 67 75 6e 65 61 6b 20 68 61 75 20 65 67 69 6e 20 6e 61 68 69 20 64 75 3a 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 45 72 61 6b 75 74 73 69 20 6a 61 6b 69 6e 61 72 61 7a 70 65 6e 61 6b 27 2c 27 61 6c 6c 6f 77 27 3a 27 42 61 69 6d 65 6e 64 75 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 65 61 74 75 27 7d 2c 27 70 61 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 e0 a8 87 e0 a8 b9 20 e0 a8 95 e0 a8 b0 e0 a8 a8 e0 a8 be 20 e0 a8 9a e0 a8 be e0 a8 b9 e0 a9 81 e0 a9 b0 e0 a8 a6 e0 a9 80 20 e0 a8 b9 e0 a9 88 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 Data Ascii: :'','disallow':''},'eu':{'title':'... webguneak hau egin nahi du:','permission':'Erakutsi jakinarazpenak','allow':'Baimendu','disallow':'Blokeatu'},'pa':{'title':'... ','permission':'
2024-10-31 21:20:26 UTC	1369	IN	Data Raw: b0 d0 b7 d0 b2 d0 be d0 bb d1 8b 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 d0 9f d0 b0 d0 ba d0 b0 d0 b7 d0 b2 d0 b0 d1 86 d1 8c 20 d0 b0 d0 bf d0 b0 d0 b2 d1 8f d1 88 d1 87 d1 8d d0 bd d0 bd d1 96 27 2c 27 61 6c 6c 6f 77 27 3a 27 d0 94 d0 b0 d0 b7 d0 b2 d0 be d0 bb d1 96 d1 86 d1 8c 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 d0 97 d0 b0 d0 b1 d0 bb d0 b0 d0 ba d1 96 d1 80 d0 b0 d0 b2 d0 b0 d1 86 d1 8c 27 7d 2c 27 6c 74 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 6e 6f 72 69 3a 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 52 6f 64 79 74 69 20 70 72 61 6e 65 c5 a1 69 6d 75 73 27 2c 27 61 6c 6c 6f 77 27 3a 27 4c 65 69 73 74 69 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 75 6f 74 69 27 7d 2c 27 6b 6b 27 3a 7b 27 74 69 74 6c 65 27 3a 27 Data Ascii: ','permission':' ','allow':'','disallow':''},'lt':{'title':'... nori:','permission':'Rodyti praneimus','allow':'Leisti','disallow':'Blokuoti'},'kk':{'title':'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49771	104.21.12.31	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:27 UTC	619	OUT	GET /ps/config.js?id=CHiI7Gh3GUyTa8XGgNqDyQ HTTP/1.1 Host: cdnstatic.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qltuh.everestpeak.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8
2024-10-31 21:20:27 UTC	920	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: max-age=0, no-cache, no-store, must-revalidate accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i64QQZOyBO61L%2Bo7zRzoDgI1xPX%2FKPR79PFZMVJxLnWDT5hJuGEIz7YczTmh7ACxOJzRfljMDUeef2XV9ORe9wzXA4CjbzlRYeQHFDovIRm96UKWC22W5Bt%2BHqi6kMdVFKWi07k6ayu6ewbi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b06d5a412e1b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1944&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1197&delivery_rate=1484366&cwnd=238&unsent_bytes=0&cid=26ed2589222fba2a&ts=389&x=0"
2024-10-31 21:20:27 UTC	367	IN	Data Raw: 31 36 38 0d 0a 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 0d 0a 20 20 20 20 27 61 70 69 4b 65 79 27 3a 27 41 49 7a 61 53 79 43 4f 45 36 4e 45 6f 39 6a 46 70 41 4a 5a 65 51 69 4d 75 4c 76 53 4c 67 36 48 53 41 4b 75 43 33 6b 27 2c 0d 0a 20 20 20 20 27 61 75 74 68 44 6f 6d 61 69 6e 27 3a 27 67 68 75 6e 6e 2d 66 34 34 31 61 2e 66 69 72 65 62 61 73 65 61 70 70 2e 63 6f 6d 27 2c 0d 0a 20 20 20 20 27 64 61 74 61 62 61 73 65 55 52 4c 27 3a 27 68 74 74 70 73 3a 2f 2f 67 68 75 6e 6e 2d 66 34 34 31 61 2e 66 69 72 65 62 61 73 65 69 6f 2e 63 6f 6d 27 2c 0d 0a 20 20 20 20 27 70 72 6f 6a 65 63 74 49 64 27 3a 27 67 68 75 6e 6e 2d 66 34 34 31 61 27 2c 0d 0a 20 20 20 20 27 61 70 70 49 64 27 3a 27 31 3a 33 35 38 38 30 33 38 37 32 30 36 36 3a 77 65 62 3a 65 66 37 65 38 32 33 Data Ascii: 168var config = { 'apiKey':'AIzaSyCOE6NEo9jFpAJZeQiMuLvSLg6HSAKuC3k', 'authDomain':'ghunn-f441a.firebaseapp.com', 'databaseURL':'https://ghunn-f441a.firebaseio.com', 'projectId':'ghunn-f441a', 'appId':'1:358803872066:web:ef7e823
2024-10-31 21:20:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49772	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:27 UTC	645	OUT	GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&sub_id=&appspot=&d=https%3A%2F%2Fcdnstatic.everestpeak.top&timeout=1800&tb=true&nrid=8ef3ad173d6b44f8905002ffdf1d0e14 HTTP/1.1 Host: cdnstatic.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8
2024-10-31 21:20:27 UTC	926	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: max-age=0, no-cache, no-store, must-revalidate accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZsThjU4eNae3o%2FoPcXfuehXjEkW3qPO06aFYYZE4w4%2FmHFARMbjBbAzZAAlUEfU%2BJ%2FkIUVGaZC67eEtGgAMUn055N9biXlJ3Sf8DZM%2BwdGNybhpUbXJSQm%2FWnRWainz6ZgVE8KMxFLovgGUg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b06d58614660-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1910&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1223&delivery_rate=1458942&cwnd=251&unsent_bytes=0&cid=8a35faa848646fe0&ts=386&x=0"
2024-10-31 21:20:27 UTC	443	IN	Data Raw: 37 63 63 30 0d 0a 63 6f 6e 73 74 20 61 30 5f 30 78 32 39 31 35 3d 5b 27 32 30 34 39 52 47 4a 61 78 45 27 2c 27 70 61 72 65 6e 74 4e 6f 64 65 27 2c 27 74 65 73 74 27 2c 27 6f 6e 50 65 72 6d 69 73 73 69 6f 6e 41 6c 6c 6f 77 65 64 27 2c 27 72 65 6c 6f 61 64 27 2c 27 61 73 73 69 67 6e 27 2c 27 63 6f 64 65 27 2c 27 32 36 32 30 38 31 72 71 4c 57 53 79 27 2c 27 6a 6f 69 6e 27 2c 27 63 6c 6f 73 65 73 74 27 2c 27 6c 61 6e 67 75 61 67 65 27 2c 27 61 6c 6c 6f 77 27 2c 27 67 65 74 54 6f 6b 65 6e 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 64 27 2c 27 73 74 61 74 75 73 27 2c 27 69 73 4d 6f 62 69 6c 65 27 2c 27 74 69 74 6c 65 27 2c 27 6f 6e 50 65 72 6d 69 73 73 69 6f 6e 44 65 66 61 75 6c 74 27 2c 27 32 34 6b 59 71 44 4b 69 27 2c 27 69 73 53 75 70 70 6f 72 74 65 64 27 2c 27 Data Ascii: 7cc0const a0_0x2915=['2049RGJaxE','parentNode','test','onPermissionAllowed','reload','assign','code','262081rqLWSy','join','closest','language','allow','getToken','appendChild','status','isMobile','title','onPermissionDefault','24kYqDKi','isSupported','
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 6c 79 27 2c 27 34 36 35 38 38 44 6d 6a 71 67 74 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 2c 27 70 61 72 73 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 77 65 62 6b 69 74 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 27 2c 27 74 6f 4c 6f 77 65 72 43 61 73 65 27 2c 27 63 6c 6f 73 65 27 2c 27 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 27 2c 27 6d 73 52 65 71 75 65 73 74 46 75 6c 6c 73 63 72 65 65 6e 27 2c 27 73 65 74 49 74 65 6d 27 2c 27 69 6e 63 6c 75 64 65 73 27 2c 27 72 65 73 6f 6c 76 65 27 2c 27 63 68 61 72 43 6f 64 65 41 74 27 2c 27 61 70 70 73 27 2c 27 72 65 71 75 65 73 74 46 75 6c 6c 73 63 72 65 65 6e 27 2c 27 61 70 70 27 2c 27 6e 61 6d 65 27 2c 27 6f 6e 41 6c 72 65 61 64 79 53 75 62 73 63 72 69 62 65 64 27 2c 27 62 6f 64 79 27 2c Data Ascii: ly','46588Dmjqgt','permission','parse','querySelector','webkitRequestFullScreen','toLowerCase','close','preventDefault','msRequestFullscreen','setItem','includes','resolve','charCodeAt','apps','requestFullscreen','app','name','onAlreadySubscribed','body',
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 20 5f 30 78 38 64 61 38 32 38 5b 27 70 75 73 68 27 5d 28 5f 30 78 38 64 61 38 32 38 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 33 65 33 36 33 32 29 7b 5f 30 78 38 64 61 38 32 38 5b 27 70 75 73 68 27 5d 28 5f 30 78 38 64 61 38 32 38 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 5f 30 78 32 39 31 35 2c 30 78 31 38 66 30 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 31 63 35 61 61 38 3d 61 30 5f 30 78 35 36 31 32 2c 5f 30 78 34 62 64 30 32 66 3d 27 43 48 69 49 37 47 68 33 47 55 79 54 61 38 58 47 67 4e 71 44 79 51 27 2c 5f 30 78 31 39 36 62 30 30 3d 27 74 72 75 65 27 3d 3d 3d 27 74 72 75 65 27 2c 5f 30 78 34 38 65 35 36 38 3d 27 66 61 6c 73 65 27 3d 3d 3d 27 74 72 75 65 27 2c 5f 30 78 32 33 65 64 62 Data Ascii: _0x8da828['push'](_0x8da828['shift']());}catch(_0x3e3632){_0x8da828['push'](_0x8da828['shift']());}}}(a0_0x2915,0x18f0a),function(){const _0x1c5aa8=a0_0x5612,_0x4bd02f='CHiI7Gh3GUyTa8XGgNqDyQ',_0x196b00='true'==='true',_0x48e568='false'==='true',_0x23edb
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 6c 6f 77 27 3a 27 d0 91 d0 bb d0 be d0 ba d0 b8 d1 80 d0 b0 d1 98 27 7d 2c 27 64 61 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 69 6c 20 67 65 72 6e 65 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 56 69 73 65 20 6e 6f 74 69 66 69 6b 61 74 69 6f 6e 65 72 27 2c 27 61 6c 6c 6f 77 27 3a 27 54 69 6c 6c 61 64 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 65 72 27 7d 2c 27 6e 6c 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 77 69 6c 20 68 65 74 20 76 6f 6c 67 65 6e 64 65 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 4d 65 6c 64 69 6e 67 65 6e 20 62 65 6b 69 6a 6b 65 6e 27 2c 27 61 6c 6c 6f 77 27 3a 27 54 6f 65 73 74 61 61 6e 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 6b 65 72 65 6e 27 7d 2c 27 61 6d 27 3a 7b 27 74 69 74 6c 65 27 Data Ascii: low':''},'da':{'title':'... vil gerne','permission':'Vise notifikationer','allow':'Tillad','disallow':'Bloker'},'nl':{'title':'... wil het volgende','permission':'Meldingen bekijken','allow':'Toestaan','disallow':'Blokkeren'},'am':{'title'
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: e1 80 9c e1 80 af e1 80 95 e1 80 ba e1 80 9c e1 80 ad e1 80 af e1 80 9e e1 80 8a e1 80 ba e1 80 99 e1 80 be e1 80 ac 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 e1 80 9e e1 80 90 e1 80 ad e1 80 95 e1 80 b1 e1 80 b8 e1 80 81 e1 80 bb e1 80 80 e1 80 ba e1 80 99 e1 80 bb e1 80 ac e1 80 b8 20 e1 80 95 e1 80 bc e1 80 9b e1 80 94 e1 80 ba 27 2c 27 61 6c 6c 6f 77 27 3a 27 e1 80 81 e1 80 bd e1 80 84 e1 80 ba e1 80 b7 e1 80 95 e1 80 bc e1 80 af e1 80 9b e1 80 94 e1 80 ba 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 e1 80 95 e1 80 ad e1 80 90 e1 80 ba e1 80 86 e1 80 ad e1 80 af e1 80 b7 e1 80 9b e1 80 94 e1 80 ba 27 7d 2c 27 65 6c 27 3a 7b 27 74 69 74 6c 65 27 3a 27 54 6f 20 2e 2e 2e 20 ce b8 ce ad ce bb ce b5 ce b9 20 ce bd ce b1 27 2c 27 70 65 72 6d 69 73 73 69 Data Ascii: ','permission':' ','allow':'','disallow':''},'el':{'title':'To ... ','permissi
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 65 72 6d 69 73 73 69 6f 6e 27 3a 27 5a 6f 62 72 61 7a 6f 76 61 74 20 6f 7a 6e c3 a1 6d 65 6e c3 ad 27 2c 27 61 6c 6c 6f 77 27 3a 27 50 6f 76 6f 6c 69 74 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 6f 76 61 74 27 7d 2c 27 63 79 27 3a 7b 27 74 69 74 6c 65 27 3a 27 4d 61 65 20 2e 2e 2e 20 65 69 73 69 61 75 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 44 61 6e 67 6f 73 20 68 79 73 62 79 73 69 61 64 61 75 27 2c 27 61 6c 6c 6f 77 27 3a 27 43 61 6e 69 61 74 c3 a1 75 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 52 68 77 79 73 74 72 6f 27 7d 2c 27 73 6c 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 c5 be 65 6c 69 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 50 6f 6b 61 c5 be 69 20 6f 62 76 65 73 74 69 6c 61 27 2c 27 61 6c 6c 6f 77 27 3a 27 44 6f 76 Data Ascii: ermission':'Zobrazovat oznmen','allow':'Povolit','disallow':'Blokovat'},'cy':{'title':'Mae ... eisiau','permission':'Dangos hysbysiadau','allow':'Caniatu','disallow':'Rhwystro'},'sl':{'title':'... eli','permission':'Pokai obvestila','allow':'Dov
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 20 70 79 79 74 c3 a4 c3 a4 20 6c 75 70 61 61 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 4e c3 a4 79 74 c3 a4 20 69 6c 6d 6f 69 74 75 6b 73 65 74 27 2c 27 61 6c 6c 6f 77 27 3a 27 53 61 6c 6c 69 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 45 73 74 c3 a4 27 7d 2c 27 6e 62 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 69 6c 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 56 69 73 20 76 61 72 73 6c 65 72 27 2c 27 61 6c 6c 6f 77 27 3a 27 54 69 6c 6c 61 74 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 6b c3 a9 72 27 7d 2c 27 6e 6f 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 76 69 6c 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 56 69 73 20 76 61 72 73 6c 65 72 27 2c 27 61 6c 6c 6f 77 27 3a 27 54 69 6c 6c 61 74 27 2c 27 64 69 73 61 6c 6c 6f Data Ascii: pyyt lupaa','permission':'Nyt ilmoitukset','allow':'Salli','disallow':'Est'},'nb':{'title':'... vil','permission':'Vis varsler','allow':'Tillat','disallow':'Blokkr'},'no':{'title':'... vil','permission':'Vis varsler','allow':'Tillat','disallo
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 82 d1 82 d0 b5 d1 80 d0 b4 d0 b8 20 d0 b0 d1 82 d0 ba d0 b0 d1 80 d0 b0 d1 82 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 d0 91 d0 b8 d0 bb d0 b4 d0 b8 d1 80 d0 bc d0 b5 d0 bb d0 b5 d1 80 d0 b4 d0 b8 20 d0 ba d3 a9 d1 80 d1 81 d3 a9 d1 82 d2 af d2 af 27 2c 27 61 6c 6c 6f 77 27 3a 27 d0 a3 d1 80 d1 83 d0 ba d1 81 d0 b0 d1 82 20 d0 b1 d0 b5 d1 80 d2 af d2 af 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 d0 91 d3 a9 d0 b3 d3 a9 d1 82 d1 82 d3 a9 d3 a9 27 7d 2c 27 64 65 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 6d c3 b6 63 68 74 65 3a 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 42 65 6e 61 63 68 72 69 63 68 74 69 67 75 6e 67 65 6e 20 61 6e 7a 65 69 67 65 6e 27 2c 27 61 6c 6c 6f 77 27 3a 27 5a 75 6c 61 73 73 65 6e 27 2c 27 64 69 73 61 6c 6c 6f 77 27 Data Ascii: ','permission':' ','allow':' ','disallow':''},'de':{'title':'... mchte:','permission':'Benachrichtigungen anzeigen','allow':'Zulassen','disallow'
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: 7a 70 65 6e 61 6b 27 2c 27 61 6c 6c 6f 77 27 3a 27 42 61 69 6d 65 6e 64 75 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 65 61 74 75 27 7d 2c 27 70 61 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 e0 a8 87 e0 a8 b9 20 e0 a8 95 e0 a8 b0 e0 a8 a8 e0 a8 be 20 e0 a8 9a e0 a8 be e0 a8 b9 e0 a9 81 e0 a9 b0 e0 a8 a6 e0 a9 80 20 e0 a8 b9 e0 a9 88 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 e0 a8 b8 e0 a9 82 e0 a8 9a e0 a8 a8 e0 a8 be e0 a8 b5 e0 a8 be e0 a8 82 20 e0 a8 a6 e0 a8 bf e0 a8 96 e0 a8 be e0 a8 93 27 2c 27 61 6c 6c 6f 77 27 3a 27 e0 a8 86 e0 a8 97 e0 a8 bf e0 a8 86 20 e0 a8 a6 e0 a8 bf e0 a8 93 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 e0 a8 ac e0 a8 b2 e0 a9 8c e0 a8 95 20 e0 a8 95 e0 a8 b0 e0 a9 8b 27 7d 2c 27 75 6b 27 3a 7b 27 74 69 74 Data Ascii: zpenak','allow':'Baimendu','disallow':'Blokeatu'},'pa':{'title':'... ','permission':' ','allow':' ','disallow':' '},'uk':{'tit
2024-10-31 21:20:27 UTC	1369	IN	Data Raw: ba d1 96 d1 80 d0 b0 d0 b2 d0 b0 d1 86 d1 8c 27 7d 2c 27 6c 74 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 6e 6f 72 69 3a 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 52 6f 64 79 74 69 20 70 72 61 6e 65 c5 a1 69 6d 75 73 27 2c 27 61 6c 6c 6f 77 27 3a 27 4c 65 69 73 74 69 27 2c 27 64 69 73 61 6c 6c 6f 77 27 3a 27 42 6c 6f 6b 75 6f 74 69 27 7d 2c 27 6b 6b 27 3a 7b 27 74 69 74 6c 65 27 3a 27 2e 2e 2e 20 d2 af d1 88 d1 96 d0 bd 20 d2 9b d0 b0 d0 b6 d0 b5 d1 82 d1 82 d1 96 20 d3 99 d1 80 d0 b5 d0 ba d0 b5 d1 82 d1 82 d0 b5 d1 80 3a 27 2c 27 70 65 72 6d 69 73 73 69 6f 6e 27 3a 27 d0 a5 d0 b0 d0 b1 d0 b0 d1 80 d0 bb d0 b0 d0 bd d0 b4 d1 8b d1 80 d1 83 d0 bb d0 b0 d1 80 d0 b4 d1 8b 20 d0 ba d3 a9 d1 80 d1 81 d0 b5 d1 82 d1 83 27 2c 27 61 6c 6c 6f 77 27 3a Data Ascii: '},'lt':{'title':'... nori:','permission':'Rodyti praneimus','allow':'Leisti','disallow':'Blokuoti'},'kk':{'title':'... :','permission':' ','allow':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49777	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:29 UTC	439	OUT	GET /ps/config.js?id=CHiI7Gh3GUyTa8XGgNqDyQ HTTP/1.1 Host: cdnstatic.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __psu=110d5b96-0656-4f03-afca-1f9d8b01b9a8
2024-10-31 21:20:29 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close cache-control: max-age=0, no-cache, no-store, must-revalidate accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eF5Vu1G2jyHWgWitOi8C%2Bs2sbmjdP%2Blfq14gwIi8NNSpgiKcax7rYv5%2F2OLunh3w4VDe5ZGoWCx7%2B0GRE92FwocveZBkmX5Sllnq0zTVIPZV5LnzX4wJdHvP0xvVsmH2CMip1F%2FosEB2qlMK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b0779edf2e79-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1608&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1017&delivery_rate=1788758&cwnd=248&unsent_bytes=0&cid=58664431ef347fbd&ts=301&x=0"
2024-10-31 21:20:29 UTC	367	IN	Data Raw: 31 36 38 0d 0a 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 7b 0d 0a 20 20 20 20 27 61 70 69 4b 65 79 27 3a 27 41 49 7a 61 53 79 43 4f 45 36 4e 45 6f 39 6a 46 70 41 4a 5a 65 51 69 4d 75 4c 76 53 4c 67 36 48 53 41 4b 75 43 33 6b 27 2c 0d 0a 20 20 20 20 27 61 75 74 68 44 6f 6d 61 69 6e 27 3a 27 67 68 75 6e 6e 2d 66 34 34 31 61 2e 66 69 72 65 62 61 73 65 61 70 70 2e 63 6f 6d 27 2c 0d 0a 20 20 20 20 27 64 61 74 61 62 61 73 65 55 52 4c 27 3a 27 68 74 74 70 73 3a 2f 2f 67 68 75 6e 6e 2d 66 34 34 31 61 2e 66 69 72 65 62 61 73 65 69 6f 2e 63 6f 6d 27 2c 0d 0a 20 20 20 20 27 70 72 6f 6a 65 63 74 49 64 27 3a 27 67 68 75 6e 6e 2d 66 34 34 31 61 27 2c 0d 0a 20 20 20 20 27 61 70 70 49 64 27 3a 27 31 3a 33 35 38 38 30 33 38 37 32 30 36 36 3a 77 65 62 3a 65 66 37 65 38 32 33 Data Ascii: 168var config = { 'apiKey':'AIzaSyCOE6NEo9jFpAJZeQiMuLvSLg6HSAKuC3k', 'authDomain':'ghunn-f441a.firebaseapp.com', 'databaseURL':'https://ghunn-f441a.firebaseio.com', 'projectId':'ghunn-f441a', 'appId':'1:358803872066:web:ef7e823
2024-10-31 21:20:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49787	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:33 UTC	781	OUT	GET /space-robot/assets/favicon.ico HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:33 UTC	886	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:33 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-3aee" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4644 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=msN0prsX7QvztGfw9X8Q%2BhuYAKemOo4KHpz%2FGsz0elzdjh3Z6VCpErIUaZcu5OBtr2ehuIK%2Bx6G64SYmRScR%2BOgjVXkExqyGkNiBbzexWFSKX%2BDwpjhW6snShtTnLTnW3J2tGyRH3xU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b091daf61443-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1359&delivery_rate=2578806&cwnd=251&unsent_bytes=0&cid=ba3947813ffc1e7d&ts=156&x=0"
2024-10-31 21:20:33 UTC	483	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 a9 a5 a5 02 03 02 02 02 00 00 00 02 34 33 33 02 f0 f0 f0 02 ff ff ff 02 ff Data Ascii: 00 %6 % h6(0` $433
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff f0 ee ee ff cf c8 c7 ff a9 9d 9b ff 88 77 74 ff 74 61 5e ff 6e 59 56 ff 6f 5b 58 ff 76 63 60 ff 7d 6a 68 ff 7f 6d 6a ff 7f 6e 6b ff 7b 68 66 ff 76 63 60 ff 70 5c 59 ff 6d 59 56 ff 71 5d 5a ff 80 6e 6c ff 9a 8c 8a ff c0 b7 b6 ff e3 e0 df ff fa f9 f9 ff ff ff ff ff fc fc fc ff ed eb ea ff f4 f3 f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 f3 f3 ff ca c3 c2 ff 91 81 7f ff 6e 5a 57 ff 70 5c 59 ff 8c 7c 79 ff b1 a6 a4 ff Data Ascii: wtta^nYVo[Xvc`}jhmjnk{hfvc`p\YmYVq]ZnlnZWp\Y\|y
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: 8b ff ff ff ff ff ff ff ff ff a1 94 92 ff 8e 7e 7c ff cb c3 c2 ff 52 3a 36 ff 3b 1f 1b ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3c 21 1d ff 3b 20 1c ff 4d 34 31 ff 90 80 7e ff d4 ce cd ff 91 81 7f ff 7b 68 66 ff ec e9 e9 ff ff ff ff ff ff ff ff ff ce c7 c6 ff 6f 5a 57 ff f0 ee ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 ee ed ff 82 71 78 ff ac a5 d5 ff 71 60 72 ff bc b2 b0 ff ff ff ff ff f9 f8 f8 ff 7a 67 64 ff c2 b9 b8 ff 7d 6a 68 ff 3a 1f 1b ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3d 22 1d ff 3c 21 1c ff 3d 22 1e ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e Data Ascii: ~\|R:6;>#>#>#>#>#>#>#>#>#>#>#>#>#>#>#>#>#<!; M41~{hfoZWqxq`rzgd}jh:>#>#>#="<!=">#>#>#>
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: ff 3d 22 1d ff 4e 36 39 ff b3 ad df ff c7 c5 ff ff c6 c4 ff ff bf bc f3 ff 61 4c 58 ff 3c 21 1c ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3d 21 1d ff 88 7b 99 ff c7 c6 ff ff c5 c3 ff ff c6 c4 ff ff ba b5 eb ff 54 3d 44 ff 3d 21 1d ff 3d 22 1e ff 4a 31 2d ff c8 c1 c0 ff 6f 5b 58 ff d6 d0 cf ff ff ff ff ff f1 ef ef ff 6c 58 5a ff aa a4 d4 ff bc b9 f2 ff 81 70 7b ff ee ec eb ff ff ff ff ff ff ff ff ff a1 94 93 ff 9c 93 bd ff c9 c8 ff ff 9b 91 bb ff 7a 67 66 ff fb fa fa ff ff ff ff ff a9 9d 9c ff 98 8a 88 ff a8 9c 9a ff 3c 21 1d ff 3e 23 1f ff 3e 23 1f ff 3e 24 20 ff 7f 70 8b ff c2 bf f9 ff c3 c1 fc ff 8c 80 a1 ff 42 28 26 ff 3e 23 1e ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3c 21 1c ff 7a 6a Data Ascii: ="N69aLX<!>#>#>#>#>#>#=!{T=D=!="J1-o[XlXZp{zgf<!>#>#>$ pB(&>#>#>#>#>#>#>#<!zj
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: d5 cf ce ff ea e7 e7 ff f2 f0 f0 ff f3 f1 f1 ff ed ea ea ff dd d9 d8 ff bf b6 b5 ff 91 81 7f ff 6c 58 55 ff 98 89 87 ff d8 d3 d2 ff 78 66 63 ff 45 2a 27 ff 4e 35 31 ff 61 4b 48 ff 90 81 7e ff d1 cb ca ff 99 8b 89 ff 77 64 61 ff f0 ee ee ff ff ff ff ff dc d7 d6 ff 64 4f 55 ff b6 b2 e7 ff c2 c0 fa ff 7c 6c 7f ff d6 d0 cf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e4 e0 df ff 83 72 78 ff 5b 45 4e ff b3 a8 a6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ff e3 df de ff b0 a5 a4 ff 87 76 74 ff 67 51 4e ff 54 3c 38 ff d1 ca c9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff e4 e1 e0 ff 8b 7a 78 ff 89 78 76 ff dd d8 d7 ff c7 bf be ff cc c4 c3 ff ce c7 c6 ff b6 ac ab Data Ascii: lXUxfcE*'N51aKH~wdadOU\|lrx[ENvtgQNT<8zxxv
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff d3 cd cc ff 59 42 3f ff e0 dc db ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 df de ff 75 62 5f ff 9e 90 8e ff fb fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fa fa ff a7 9b 99 ff 6b 56 53 ff ce c7 c6 ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f2 f2 ff 66 51 4d ff b4 aa a8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c6 be bd ff 5d 46 43 ff ea e7 e6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d3 cd cc ff 70 5c 59 ff 9d 8f 8d ff f8 f7 f7 ff Data Ascii: YB?ub_kVSfQM]FCp\Y
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f4 f4 f4 ff f6 f6 f6 ff fa fa fa ff fd fd fd ff ff ff ff ff ff ff ff ff fe fe fe ff de d9 d8 ff 5e 47 43 ff 6d 59 55 ff f6 f4 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc Data Ascii: ^GCmYU
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fa fb ff ea ea ea ff f8 f7 f6 ff fc fd fd ff f3 f3 f3 ff fc fc fc ff f4 f4 f3 ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 f4 f4 ff f8 f8 f8 ff fe fe fe ff ff ff ff ff ff ff ff ff f8 f7 f6 ff ea e7 e5 ff f2 f0 f0 ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c5 ca d0 8a 5c 5d 5e 8a bb b5 ad 8a ea ed f0 8a a8 a6 a2 8a e4 e6 e7 8a a8 a6 Data Ascii: \]^
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: d0 c9 c8 ff b7 ad ab ff 9c 8e 8c ff 94 86 83 ff b2 a8 a6 ff e5 e1 e1 ff fe fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f8 f7 f6 ff ac a0 9f ff 94 85 83 ff bf b6 b4 ff eb e8 e8 ff e7 e4 e3 ff c1 b9 b8 ff a6 99 97 ff 9b 8d 8b ff 99 8b 89 ff 9c 8e 8c ff 9a 8c 8a ff 99 8b 89 ff 9a 8c 8a ff 9f 92 90 ff ab 9f 9e ff c0 b7 b6 ff da d5 d4 ff e2 dd dd ff c1 b8 b7 ff 96 88 86 ff a3 97 95 ff e0 db da ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cb c4 c3 ff 9c 8e 8c ff f7 f6 f6 ff f9 f8 f8 ff b8 ae ad ff 95 86 84 ff a4 97 96 ff a7 9a 98 ff 9b 8d 8b ff 8f 7f 7d ff 87 77 74 ff 86 75 72 ff 8a 7a 77 ff 93 84 82 ff 9e 91 8f Data Ascii: }wturzw
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: 1f 1b ff 3d 22 1e ff 3b 1f 1b ff 3e 23 1e ff 4f 36 32 ff 5d 46 43 ff 61 4b 48 ff 5a 43 40 ff 4c 33 30 ff 3f 24 20 ff 3b 1f 1b ff 47 2e 2e ff 4a 31 33 ff 3e 23 1f ff 3e 22 1e ff 47 2d 2a ff a1 94 92 ff a5 99 97 ff ff ff ff ff 9d 90 92 ff ab a4 d5 ff a8 a1 cc ff c3 bb bc ff ff ff ff ff f7 f6 f5 ff 9e 92 a1 ff ad a7 d9 ff 8f 80 88 ff fb fa fa ff db d6 d5 ff 91 81 7f ff aa 9e 9c ff 74 61 5e ff 4e 35 31 ff 62 4c 48 ff 9c 8f 8d ff a6 99 98 ff a2 94 93 ff a1 94 92 ff a4 97 95 ff a6 9a 98 ff 9d 90 8e ff 74 60 5d ff 43 29 25 ff 3c 20 1c ff 3d 22 1d ff 3a 1e 1a ff 60 4a 46 ff a3 96 94 ff b7 ac ab ff fb fa f9 ff 8c 7d 85 ff b8 b4 eb ff 9e 94 b5 ff d6 d1 d0 ff ff ff ff ff ff ff ff ff ca c3 c4 ff 97 8c ae ff 82 73 84 ff e7 e3 e2 ff ff ff ff ff d2 cb cb ff 95 87 84 ff Data Ascii: =";>#O62]FCaKHZC@L30?$ ;G..J13>#>"G-*ta^N51bLHt`]C)%< =":`JF}s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49786	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:33 UTC	660	OUT	GET /sw-4f2862d8ae3425bbeba0457736992b20.js HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://qltuh.everestpeak.top/space-robot/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&sm=space-robot&click_id=cs7bt8l3kl6c73ftli7g&nrid=8ef3ad173d6b44f8905002ffdf1d0e14&hash=5ZedV-h0_6_5WHdJebnc5w&exp=1730409918 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:33 UTC	888	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:33 GMT Content-Type: application/javascript Content-Length: 2388 Connection: close last-modified: Sat, 08 Apr 2023 14:34:09 GMT etag: "64317b61-954" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4795 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTp8J03wH8U4SURo4ljckJbXi2IiRjFagjrOK7UDbUvWbTzXDmMWnaHuTbU1shCOpKuWHZb9uK54aNcSI99THEhrX3hb3N3MfNrAihos3re11%2BdbtO9jm%2B2gyoL0tzfivk16pOZGNJs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b091e8ef2cdc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1901&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1238&delivery_rate=1550321&cwnd=251&unsent_bytes=0&cid=a29ea92fcd537ca5&ts=169&x=0"
2024-10-31 21:20:33 UTC	481	IN	Data Raw: 2f 2a 0a 20 2a 20 76 2e 20 31 2e 30 2e 35 0a 20 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 73 65 6c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 75 73 68 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 0a 20 20 76 61 72 20 70 75 73 68 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 76 65 6e 74 2e 64 61 74 61 2e 74 65 78 74 28 29 29 3b 0a 0a 20 20 69 66 20 28 70 75 73 68 2e 64 61 74 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 70 69 78 65 6c 27 29 20 26 26 20 76 61 6c 69 64 55 52 4c 28 70 75 73 68 2e 64 61 74 61 2e 70 69 78 65 6c 29 29 20 7b 0a 20 20 20 20 76 61 72 20 70 69 78 65 6c 55 72 6c 20 3d 20 70 75 73 68 2e 64 61 74 61 2e 70 69 78 65 6c 3b 0a 20 20 20 20 76 61 72 20 67 65 74 54 72 61 63 6b 69 6e 67 50 69 78 65 6c 50 Data Ascii: /* * v. 1.0.5 */'use strict';self.addEventListener('push', (event) => { var push = JSON.parse(event.data.text()); if (push.data.hasOwnProperty('pixel') && validURL(push.data.pixel)) { var pixelUrl = push.data.pixel; var getTrackingPixelP
2024-10-31 21:20:33 UTC	1369	IN	Data Raw: 74 55 6e 74 69 6c 28 70 72 6f 6d 69 73 65 43 68 61 69 6e 29 3b 0a 20 20 7d 0a 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 65 76 65 6e 74 2e 77 61 69 74 55 6e 74 69 6c 28 73 68 6f 77 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 70 75 73 68 29 29 3b 0a 20 20 7d 3b 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 70 75 73 68 29 20 7b 0a 20 20 76 61 72 20 74 61 67 20 3d 20 70 75 73 68 2e 64 61 74 61 2e 74 61 67 3b 0a 20 20 69 66 20 28 74 61 67 20 26 26 20 74 61 67 2e 73 74 61 72 74 73 57 69 74 68 28 27 73 65 72 76 69 63 65 5f 6d 65 73 73 61 67 65 27 29 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 74 6c 65 20 3d 20 70 75 73 68 2e 64 61 74 61 2e 74 69 74 6c 65 Data Ascii: tUntil(promiseChain); } else { event.waitUntil(showPushNotification(push)); };});function showPushNotification(push) { var tag = push.data.tag; if (tag && tag.startsWith('service_message')) { return; } var title = push.data.title
2024-10-31 21:20:33 UTC	538	IN	Data Raw: 63 74 69 6f 6e 28 74 61 72 67 65 74 2c 20 65 76 65 6e 74 29 20 7b 0a 20 20 76 61 72 20 75 72 6c 20 3d 20 6e 65 77 20 55 52 4c 28 74 61 72 67 65 74 29 3b 0a 20 20 6c 65 74 20 61 63 74 69 6f 6e 20 3d 20 65 76 65 6e 74 2e 61 63 74 69 6f 6e 3b 0a 20 20 6c 65 74 20 61 63 74 69 6f 6e 4e 75 6d 62 65 72 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 69 6e 67 28 61 63 74 69 6f 6e 2e 6c 65 6e 67 74 68 20 2d 20 31 29 3b 0a 20 20 75 72 6c 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 61 70 70 65 6e 64 28 22 62 74 6e 22 2c 20 61 63 74 69 6f 6e 4e 75 6d 62 65 72 29 3b 0a 20 20 74 61 72 67 65 74 20 3d 20 75 72 6c 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0a 20 20 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 55 52 4c 28 75 72 6c Data Ascii: ction(target, event) { var url = new URL(target); let action = event.action; let actionNumber = action.substring(action.length - 1); url.searchParams.append("btn", actionNumber); target = url.toString(); return target;}function validURL(url

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49790	172.67.131.236	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:20:35 UTC	375	OUT	GET /space-robot/assets/favicon.ico HTTP/1.1 Host: qltuh.everestpeak.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 21:20:35 UTC	877	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:20:35 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close last-modified: Fri, 18 Oct 2024 12:58:55 GMT etag: "67125b8f-3aee" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4646 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ihtW25vvGz9yIik0cBiU7P3zBF7vZGv6NFNhLX3RaScCwvVbf9JnOLNlpi2LL%2BsKepVmx0yAPYPKT44nfHrs9SDS91SUDfYfyXtso6Tn3GFUJvRddkf0wDoaBWNJUz3ABfdzsudUeIQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db6b09c4aca0c27-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1818&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=953&delivery_rate=1562028&cwnd=251&unsent_bytes=0&cid=3a2675ea927877d5&ts=303&x=0"
2024-10-31 21:20:35 UTC	492	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 ff ff ff 02 a9 a5 a5 02 03 02 02 02 00 00 00 02 34 33 33 02 f0 f0 f0 02 ff ff ff 02 ff Data Ascii: 00 %6 % h6(0` $433
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff f0 ee ee ff cf c8 c7 ff a9 9d 9b ff 88 77 74 ff 74 61 5e ff 6e 59 56 ff 6f 5b 58 ff 76 63 60 ff 7d 6a 68 ff 7f 6d 6a ff 7f 6e 6b ff 7b 68 66 ff 76 63 60 ff 70 5c 59 ff 6d 59 56 ff 71 5d 5a ff 80 6e 6c ff 9a 8c 8a ff c0 b7 b6 ff e3 e0 df ff fa f9 f9 ff ff ff ff ff fc fc fc ff ed eb ea ff f4 f3 f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 f3 f3 ff ca c3 c2 ff 91 81 7f ff 6e 5a 57 ff 70 5c 59 ff 8c 7c 79 ff b1 a6 a4 ff ce c7 c6 ff e4 e0 e0 ff f2 Data Ascii: wtta^nYVo[Xvc`}jhmjnk{hfvc`p\YmYVq]ZnlnZWp\Y\|y
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: ff a1 94 92 ff 8e 7e 7c ff cb c3 c2 ff 52 3a 36 ff 3b 1f 1b ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3c 21 1d ff 3b 20 1c ff 4d 34 31 ff 90 80 7e ff d4 ce cd ff 91 81 7f ff 7b 68 66 ff ec e9 e9 ff ff ff ff ff ff ff ff ff ce c7 c6 ff 6f 5a 57 ff f0 ee ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 ee ed ff 82 71 78 ff ac a5 d5 ff 71 60 72 ff bc b2 b0 ff ff ff ff ff f9 f8 f8 ff 7a 67 64 ff c2 b9 b8 ff 7d 6a 68 ff 3a 1f 1b ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3d 22 1d ff 3c 21 1c ff 3d 22 1e ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 Data Ascii: ~\|R:6;>#>#>#>#>#>#>#>#>#>#>#>#>#>#>#>#>#<!; M41~{hfoZWqxq`rzgd}jh:>#>#>#="<!=">#>#>#>#>#>#
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: b3 ad df ff c7 c5 ff ff c6 c4 ff ff bf bc f3 ff 61 4c 58 ff 3c 21 1c ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3d 21 1d ff 88 7b 99 ff c7 c6 ff ff c5 c3 ff ff c6 c4 ff ff ba b5 eb ff 54 3d 44 ff 3d 21 1d ff 3d 22 1e ff 4a 31 2d ff c8 c1 c0 ff 6f 5b 58 ff d6 d0 cf ff ff ff ff ff f1 ef ef ff 6c 58 5a ff aa a4 d4 ff bc b9 f2 ff 81 70 7b ff ee ec eb ff ff ff ff ff ff ff ff ff a1 94 93 ff 9c 93 bd ff c9 c8 ff ff 9b 91 bb ff 7a 67 66 ff fb fa fa ff ff ff ff ff a9 9d 9c ff 98 8a 88 ff a8 9c 9a ff 3c 21 1d ff 3e 23 1f ff 3e 23 1f ff 3e 24 20 ff 7f 70 8b ff c2 bf f9 ff c3 c1 fc ff 8c 80 a1 ff 42 28 26 ff 3e 23 1e ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3e 23 1f ff 3c 21 1c ff 7a 6a 81 ff c6 c4 ff ff c5 c3 ff Data Ascii: aLX<!>#>#>#>#>#>#=!{T=D=!="J1-o[XlXZp{zgf<!>#>#>$ pB(&>#>#>#>#>#>#>#<!zj
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: f0 f0 ff f3 f1 f1 ff ed ea ea ff dd d9 d8 ff bf b6 b5 ff 91 81 7f ff 6c 58 55 ff 98 89 87 ff d8 d3 d2 ff 78 66 63 ff 45 2a 27 ff 4e 35 31 ff 61 4b 48 ff 90 81 7e ff d1 cb ca ff 99 8b 89 ff 77 64 61 ff f0 ee ee ff ff ff ff ff dc d7 d6 ff 64 4f 55 ff b6 b2 e7 ff c2 c0 fa ff 7c 6c 7f ff d6 d0 cf ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e4 e0 df ff 83 72 78 ff 5b 45 4e ff b3 a8 a6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ff e3 df de ff b0 a5 a4 ff 87 76 74 ff 67 51 4e ff 54 3c 38 ff d1 ca c9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff e4 e1 e0 ff 8b 7a 78 ff 89 78 76 ff dd d8 d7 ff c7 bf be ff cc c4 c3 ff ce c7 c6 ff b6 ac ab ff 7a 67 64 ff 7a 67 65 ff Data Ascii: lXUxfcE*'N51aKH~wdadOU\|lrx[ENvtgQNT<8zxxvzgdzge
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: ff ff d3 cd cc ff 59 42 3f ff e0 dc db ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 df de ff 75 62 5f ff 9e 90 8e ff fb fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fa fa ff a7 9b 99 ff 6b 56 53 ff ce c7 c6 ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f2 f2 ff 66 51 4d ff b4 aa a8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c6 be bd ff 5d 46 43 ff ea e7 e6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d3 cd cc ff 70 5c 59 ff 9d 8f 8d ff f8 f7 f7 ff ff ff ff ff ff ff ff ff ff Data Ascii: YB?ub_kVSfQM]FCp\Y
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f3 f3 f3 ff f4 f4 f4 ff f6 f6 f6 ff fa fa fa ff fd fd fd ff ff ff ff ff ff ff ff ff fe fe fe ff de d9 d8 ff 5e 47 43 ff 6d 59 55 ff f6 f4 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc ff fc fc fc ff fc fc Data Ascii: ^GCmYU
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fa fb ff ea ea ea ff f8 f7 f6 ff fc fd fd ff f3 f3 f3 ff fc fc fc ff f4 f4 f3 ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 f4 f4 ff f8 f8 f8 ff fe fe fe ff ff ff ff ff ff ff ff ff f8 f7 f6 ff ea e7 e5 ff f2 f0 f0 ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c5 ca d0 8a 5c 5d 5e 8a bb b5 ad 8a ea ed f0 8a a8 a6 a2 8a e4 e6 e7 8a a8 a6 a3 8a fd fc fa 8a ff ff ff Data Ascii: \]^
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: 8e 8c ff 94 86 83 ff b2 a8 a6 ff e5 e1 e1 ff fe fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f8 f7 f6 ff ac a0 9f ff 94 85 83 ff bf b6 b4 ff eb e8 e8 ff e7 e4 e3 ff c1 b9 b8 ff a6 99 97 ff 9b 8d 8b ff 99 8b 89 ff 9c 8e 8c ff 9a 8c 8a ff 99 8b 89 ff 9a 8c 8a ff 9f 92 90 ff ab 9f 9e ff c0 b7 b6 ff da d5 d4 ff e2 dd dd ff c1 b8 b7 ff 96 88 86 ff a3 97 95 ff e0 db da ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cb c4 c3 ff 9c 8e 8c ff f7 f6 f6 ff f9 f8 f8 ff b8 ae ad ff 95 86 84 ff a4 97 96 ff a7 9a 98 ff 9b 8d 8b ff 8f 7f 7d ff 87 77 74 ff 86 75 72 ff 8a 7a 77 ff 93 84 82 ff 9e 91 8f ff a6 9a 98 ff a4 97 95 ff Data Ascii: }wturzw
2024-10-31 21:20:35 UTC	1369	IN	Data Raw: 1b ff 3e 23 1e ff 4f 36 32 ff 5d 46 43 ff 61 4b 48 ff 5a 43 40 ff 4c 33 30 ff 3f 24 20 ff 3b 1f 1b ff 47 2e 2e ff 4a 31 33 ff 3e 23 1f ff 3e 22 1e ff 47 2d 2a ff a1 94 92 ff a5 99 97 ff ff ff ff ff 9d 90 92 ff ab a4 d5 ff a8 a1 cc ff c3 bb bc ff ff ff ff ff f7 f6 f5 ff 9e 92 a1 ff ad a7 d9 ff 8f 80 88 ff fb fa fa ff db d6 d5 ff 91 81 7f ff aa 9e 9c ff 74 61 5e ff 4e 35 31 ff 62 4c 48 ff 9c 8f 8d ff a6 99 98 ff a2 94 93 ff a1 94 92 ff a4 97 95 ff a6 9a 98 ff 9d 90 8e ff 74 60 5d ff 43 29 25 ff 3c 20 1c ff 3d 22 1d ff 3a 1e 1a ff 60 4a 46 ff a3 96 94 ff b7 ac ab ff fb fa f9 ff 8c 7d 85 ff b8 b4 eb ff 9e 94 b5 ff d6 d1 d0 ff ff ff ff ff ff ff ff ff ca c3 c4 ff 97 8c ae ff 82 73 84 ff e7 e3 e2 ff ff ff ff ff d2 cb cb ff 95 87 84 ff 9f 92 90 ff a8 9c 9a ff ac Data Ascii: >#O62]FCaKHZC@L30?$ ;G..J13>#>"G-*ta^N51bLHt`]C)%< =":`JF}s

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:10 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:10 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 30 Oct 2024 23:56:08 GMT ETag: "0x8DCF93E6CAB67A0" x-ms-request-id: 3ed0e151-601e-0032-5264-2beebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212110Z-16849878b78zqkvcwgr6h55x9n00000009d000000000zkdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:10 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-31 21:21:10 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:11 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:11 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212111Z-16849878b78wc6ln1zsrz6q9w800000009qg00000000pcxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:11 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:11 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:11 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212111Z-15b8d89586fxdh48ft0acdbg4400000003u000000000en0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:11 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:11 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:11 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f39000d0-601e-0070-220e-2ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212111Z-15b8d89586fzhrwgk23ex2bvhw0000000d2g00000000ch7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:11 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:11 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:11 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:11 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212111Z-16849878b786fl7gm2qg4r5y700000000adg0000000061h2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:11 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:11 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:11 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8207e9df-b01e-0097-6a6a-2a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212111Z-17c5cb586f6jwd8h9y40tqxu5w000000012g00000000r6pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:11 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:12 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212112Z-16849878b78x44pv2mpb0dd37w0000000290000000002xxp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:12 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:12 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 91249574-801e-0078-3dc7-27bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212112Z-17c5cb586f62vrfquq10qybcuw000000031000000000csz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:12 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:12 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212112Z-16849878b78smng4k6nq15r6s40000000bm000000000f504 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:12 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212112Z-16849878b78qg9mlz11wgn0wcc00000009pg00000000dqb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:12 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:12 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d5f61869-301e-0051-4d7a-2b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212112Z-159b85dff8f9mtxchC1DFWf9vg00000001f00000000042sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:12 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:13 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212113Z-16849878b78qg9mlz11wgn0wcc00000009qg000000009rdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:13 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f8a1f3da-c01e-0082-13cd-2aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212113Z-159b85dff8fdh9tvhC1DFW50vs000000025000000000ck5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:13 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e631ddcb-001e-0065-1f99-2a0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212113Z-17c5cb586f6d5d4vksgckxyn1c00000000ug000000003nyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:13 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212113Z-16849878b78qg9mlz11wgn0wcc00000009sg0000000016hq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:13 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:13 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 36372762-501e-0078-6258-2b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212113Z-17c5cb586f6fqqst87nqkbsx1c00000008pg000000003yvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:13 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:14 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212114Z-16849878b78bcpfn2qf7sm6hsn0000000brg000000008tk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:14 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:14 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bed14624-901e-0029-5c4f-28274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212114Z-15b8d89586fbmg6qpd9yf8zhm000000004yg00000000dwyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:14 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:14 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:14 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212114Z-16849878b78bcpfn2qf7sm6hsn0000000br000000000art3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:14 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:14 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212114Z-16849878b78fhxrnedubv5byks000000089g00000000yde5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:14 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212114Z-16849878b786lft2mu9uftf3y40000000b7000000000xv5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:15 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 5fd3a61a-e01e-0071-0feb-2a08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212115Z-15b8d89586f6nn8zqg1h5suba8000000057g00000000h77e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:15 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 134a0630-601e-0084-685d-2a6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212115Z-159b85dff8f9mtxchC1DFWf9vg00000001d0000000009sev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:15 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: def6a666-601e-0001-6e47-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212115Z-159b85dff8fbvrz4hC1DFW730c000000015000000000gs50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:15 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:15 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 4632b172-e01e-0071-11da-2b08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212115Z-15b8d89586fzhrwgk23ex2bvhw0000000d1g00000000fq2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-31 21:21:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:15 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:15 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212115Z-16849878b785jrf8dn0d2rczaw0000000b8000000000cz9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:15 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:16 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: bb81791c-801e-00ac-6687-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212116Z-159b85dff8fsgrl7hC1DFWadan00000002ug00000000dqge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:16 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212116Z-16849878b78j7llf5vkyvvcehs0000000b3g00000000p9v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:16 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212116Z-16849878b78wc6ln1zsrz6q9w800000009p000000000xdwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:16 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: fb99dfde-101e-0065-28dd-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212116Z-17c5cb586f62bgw58esgbu9hgw00000002rg00000000drew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:16 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212116Z-16849878b78qg9mlz11wgn0wcc00000009p000000000eyr1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:17 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:17 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212117Z-15b8d89586fvpb59307bn2rcac00000005900000000063qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:17 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:17 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212117Z-16849878b78xblwksrnkakc08w00000009ag00000000ecgt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:17 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212117Z-16849878b78j5kdg3dndgqw0vg0000000bvg0000000053wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:17 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:17 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: baee9024-801e-00ac-4757-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212117Z-17c5cb586f626sn8grcgm1gf8000000008fg00000000gnrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:17 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:17 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212117Z-16849878b78p8hrf1se7fucxk80000000aw000000000u4ff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:17 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:18 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:18 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212118Z-16849878b787bfsh7zgp804my400000008ug00000000mkg6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:18 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:18 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212118Z-16849878b785jrf8dn0d2rczaw0000000b5g00000000rnfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:18 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212118Z-15b8d89586fcvr6p5956n5d0rc0000000g7g00000000fkk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:18 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:18 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: fa89f893-901e-00ac-46b8-2ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212118Z-17c5cb586f64sw5wh0dfzbdtvw00000002a0000000005nbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:18 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:18 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212118Z-16849878b78bjkl8dpep89pbgg00000008p00000000103cq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-16849878b78fkwcjkpn19c5dsn000000095g00000000478x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:19 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5af050aa-401e-000a-36a7-2a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-17c5cb586f62tvgppdugz3gsrn00000000x000000000f1e8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:19 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-16849878b78hh85qc40uyr8sc80000000a8g00000000v8re x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e113be9f-801e-0035-547f-2a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-159b85dff8fbbwhzhC1DFWwpe800000002pg0000000065mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:19 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5feeb856-001e-008d-0ae8-28d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-15b8d89586fxdh48ft0acdbg440000000400000000000ea4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a606ba7c-601e-003d-0781-2a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-17c5cb586f64sw5wh0dfzbdtvw000000027000000000cu0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: bce25016-801e-0035-64b4-2a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-159b85dff8fj5szfhC1DFW6b2g00000000h0000000001ku4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212119Z-16849878b782d4lwcu6h6gmxnw00000009r000000000mrs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:19 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-16849878b78fhxrnedubv5byks00000008b000000000qsvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:20 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-16849878b78bcpfn2qf7sm6hsn0000000bk000000000zsb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:20 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-16849878b78fssff8btnns3b140000000aag00000000kg7h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:20 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-17c5cb586f6z6tq2xr35mhd5x000000002n000000000f5b9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:20 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-16849878b785dznd7xpawq9gcn0000000bkg0000000006wp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:20 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-17c5cb586f6r59nt4rzfbx40ys00000002ag00000000av2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:20 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212120Z-16849878b78bcpfn2qf7sm6hsn0000000bt0000000002788 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:21 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:21 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 1048e377-301e-0000-11d0-2aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212121Z-17c5cb586f6f8m6jcqp9ufve6n00000000w0000000000nk9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:21 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:21 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212121Z-16849878b78qfbkc5yywmsbg0c00000009r000000000kx81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:21 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:21 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212121Z-16849878b78sx229w7g7at4nkg00000008c000000000881r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:21 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:21 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 4fe48f14-f01e-005d-23b7-2a13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212121Z-159b85dff8f2qnk7hC1DFWwa2400000000mg00000000g37f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:21 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea7dc698-001e-0066-60bf-2a561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212121Z-15b8d89586ffsjj9qb0gmb1stn0000000ed0000000000x7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:22 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212122Z-16849878b786lft2mu9uftf3y40000000bb000000000d7wg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:22 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:22 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 3c311aa7-c01e-008e-22a5-2a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212122Z-159b85dff8fprglthC1DFW8zcg0000000230000000003uk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:22 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212122Z-16849878b78fssff8btnns3b140000000a9g00000000qve2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:22 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212122Z-16849878b785jrf8dn0d2rczaw0000000b4g00000000vfnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:22 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:22 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212122Z-16849878b78qf2gleqhwczd21s0000000acg0000000002wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:22 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:23 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212123Z-15b8d89586fxdh48ft0acdbg4400000003u000000000eneb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:23 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:23 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 927ac0b1-901e-0083-7fcc-2abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212123Z-159b85dff8f9mtxchC1DFWf9vg00000001ag00000000g23u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:23 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:23 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212123Z-16849878b78nzcqcd7bed2fb6n00000002e000000000u35t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:23 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf07d5f0-e01e-0020-6ed9-2ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212123Z-17c5cb586f67hfgj2durhqcxk80000000940000000004448 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:23 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212123Z-15b8d89586fmhjx6a8nf3qm53c0000000420000000000a09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:24 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:24 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: e66730c6-a01e-00ab-04f9-2a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212124Z-15b8d89586fbmg6qpd9yf8zhm000000004zg00000000btev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:24 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:24 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 951c16f0-d01e-002b-20ad-2a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212124Z-17c5cb586f659tsm88uwcmn6s400000002ng000000003vkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:24 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212124Z-16849878b78xblwksrnkakc08w00000009c00000000097g3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:24 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212124Z-15b8d89586ffsjj9qb0gmb1stn0000000eb00000000059pb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:24 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:24 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212124Z-16849878b78bjkl8dpep89pbgg00000008t000000000f4w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:24 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:25 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:25 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:25 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 335320d3-001e-000b-4596-2a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212125Z-16849878b78qfbkc5yywmsbg0c00000009p000000000vxa0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:25 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:25 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:25 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212125Z-16849878b78fhxrnedubv5byks00000008f0000000006hcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:25 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:25 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:25 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: bcc294ee-b01e-0002-0318-2b1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212125Z-15b8d89586fwzdd88qtcg4dr1800000002b0000000003uga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:25 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:25 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:25 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:25 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 09711dcd-d01e-0066-4b94-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212125Z-17c5cb586f6jwd8h9y40tqxu5w000000016000000000b6v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:25 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:25 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:25 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:25 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f43c7883-001e-0028-37e0-2ac49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212125Z-159b85dff8fbvrz4hC1DFW730c000000018g000000006ak2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:25 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:26 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:26 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 888f89be-701e-0001-21d9-2ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212126Z-15b8d89586fhl2qtatrz3vfkf00000000gg0000000008tuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:26 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:26 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212126Z-16849878b78zqkvcwgr6h55x9n00000009eg00000000tcg2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:26 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:26 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212126Z-16849878b7867ttgfbpnfxt44s00000009u0000000013bq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:26 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:26 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:26 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 353065f2-001e-0079-737c-2a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212126Z-15b8d89586f4zwgbgswvrvz4vs0000000bh000000000b49g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:26 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:26 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:26 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212126Z-16849878b787bfsh7zgp804my400000008ug00000000mkwm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:27 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:27 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 41496f62-601e-00ab-428f-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212127Z-159b85dff8fj5jwshC1DFW3rgc00000001x000000000c5fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:27 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:27 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: b7c4fd94-601e-000d-04d5-2a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212127Z-159b85dff8f7svrvhC1DFWth2s0000000240000000007z81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:27 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:27 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:27 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: f3cd1c79-a01e-0032-01bf-2a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212127Z-159b85dff8fdthgkhC1DFWk0rw000000026g000000001pyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:27 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:27 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:27 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212127Z-16849878b78fssff8btnns3b140000000ad00000000080dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:27 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:27 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:27 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 5c8c4e1d-601e-0002-3bca-2aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212127Z-159b85dff8fx9jp8hC1DFWp254000000021g00000000anv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:28 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:28 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:28 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212128Z-16849878b7898p5f6vryaqvp580000000b0g000000000me4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:28 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:28 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df5d8003-e01e-0099-48f7-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212128Z-17c5cb586f659tsm88uwcmn6s400000002h000000000dhym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:28 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:28 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:28 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 258e3987-401e-0047-4dfa-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212128Z-17c5cb586f69p7mmw593w958p4000000019000000000mbuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:28 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:28 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:28 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:28 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cdf7bdf1-501e-0029-3f94-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212128Z-17c5cb586f6jwd8h9y40tqxu5w000000016g00000000amub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:28 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:28 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:28 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:28 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 8cda5ddf-101e-0046-65bc-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212128Z-159b85dff8fdh9tvhC1DFW50vs00000002b0000000000ncv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:28 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:29 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:29 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212129Z-16849878b78fkwcjkpn19c5dsn000000090g00000000thf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:29 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:29 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212129Z-16849878b78z2wx67pvzz63kdg00000008s00000000061c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:29 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:29 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:29 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fba3b3ae-501e-00a0-12ca-2b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212129Z-159b85dff8flzqhfhC1DFWe1w000000000t000000000bxt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:29 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:29 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212129Z-16849878b78fhxrnedubv5byks00000008gg000000000qev x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49892	13.107.246.45	443	4136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:29 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:29 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212129Z-16849878b78j5kdg3dndgqw0vg0000000bqg00000000vbt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:31 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212131Z-16849878b78x6gn56mgecg60qc0000000bsg00000000zz5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:31 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212131Z-16849878b78nzcqcd7bed2fb6n00000002eg00000000rf40 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:31 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212131Z-16849878b78j7llf5vkyvvcehs0000000b4000000000m2rd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:31 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:31 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:31 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212131Z-16849878b78g2m84h2v9sta29000000008w000000000y0hh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:31 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:31 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:31 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 93439f28-801e-00ac-63f6-2afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212131Z-15b8d89586fvpb59307bn2rcac000000058000000000894b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:31 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:32 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212132Z-15b8d89586f8l5961kfst8fpb00000000p0000000000bgks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:32 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 18218850-b01e-0001-5e9c-2a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212132Z-15b8d89586ffsjj9qb0gmb1stn0000000e90000000009mnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:32 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212132Z-16849878b78fssff8btnns3b140000000abg00000000dq5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:32 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:32 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:32 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 10294bf0-701e-0021-254d-273d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212132Z-17c5cb586f6f8m6jcqp9ufve6n00000000ug000000004m22 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:32 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:32 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:32 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:32 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 8cc202a4-801e-0067-03db-2afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212132Z-159b85dff8flqhxthC1DFWsvrs000000021g00000000fh26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:32 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:33 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212133Z-16849878b78tg5n42kspfr0x480000000a1g00000000nydf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:33 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: bf9f7dfd-f01e-0052-0a98-2a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212133Z-15b8d89586fnfb49yv03rfgz1c00000001tg0000000045e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:33 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212133Z-16849878b78qf2gleqhwczd21s0000000a8000000000k6b8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:33 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212133Z-16849878b78zqkvcwgr6h55x9n00000009ng0000000002hb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:34 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212134Z-16849878b78x6gn56mgecg60qc0000000bu000000000tsyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:34 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212134Z-16849878b785jrf8dn0d2rczaw0000000b8g00000000am2b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:34 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212134Z-16849878b786lft2mu9uftf3y40000000b7g00000000y2wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:34 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:34 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 36338d89-501e-0064-6fcd-2a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212134Z-159b85dff8fvjwrdhC1DFWymhn00000000qg000000007pf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:34 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212134Z-16849878b785dznd7xpawq9gcn0000000beg00000000f85a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:35 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:35 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212135Z-16849878b78sx229w7g7at4nkg000000088g00000000qw02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:35 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:35 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:35 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212135Z-16849878b78z2wx67pvzz63kdg00000008ng00000000pprm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:35 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:35 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:35 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: fad7475d-801e-002a-7d7c-2a31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212135Z-15b8d89586fmhkw429ba5n22m80000000br000000000159m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 21:21:35 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:35 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:35 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212135Z-16849878b7867ttgfbpnfxt44s00000009wg00000000r6kz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:35 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:35 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:35 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:35 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212135Z-16849878b786fl7gm2qg4r5y700000000ac000000000cbhe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:35 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:36 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:36 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212136Z-17c5cb586f6z6tq2xr35mhd5x000000002pg00000000ahqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:36 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:36 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212136Z-16849878b78p49s6zkwt11bbkn00000009r000000000gnde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:36 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 2d08e37c-b01e-0021-309c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212136Z-17c5cb586f6ks725u50g36qts8000000023g00000000dk5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:36 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:36 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:36 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 0da8e427-501e-0035-47d8-2ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212136Z-159b85dff8fj6b6xhC1DFW8qdg00000001xg00000000br6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:36 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 21:21:36 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 21:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 21:21:36 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T212136Z-17c5cb586f6zcqf8r7the4ske0000000029g00000000q61r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 21:21:36 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1908, Parent PID: 1816

General

Target ID:	0
Start time:	17:20:07
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4136, Parent PID: 1908

General

Target ID:	2
Start time:	17:20:12
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1988,i,417364347229219285,4724628485071449306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6324, Parent PID: 1816

General

Target ID:	3
Start time:	17:20:15
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

Windows Analysis Report
https://qltuh.lyraevega.com/?pl=CHiI7Gh3GUyTa8XGgNqDyQ&click_id=cs7bt8l3kl6c73ftli7g