Edit tour

Windows Analysis Report
http://begantotireo.xyz

Overview

General Information

Sample URL:	http://begantotireo.xyz
Analysis ID:	1562439
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious URL

Performs DNS queries to domains with low reputation

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1968,i,17141759005660411578,10118279808094888985,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://begantotireo.xyz" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh	Avira URL Cloud: Label: malware
Source: http://ww38.begantotireo.xyz/favicon.ico	Avira URL Cloud: Label: malware
Source: http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh	Avira URL Cloud: Label: malware
Source: http://ww38.begantotireo.xyz/ls.php?t=67448a9a&token=8046a9ef8675aca4e45d529a18f8a6dc08d1152f	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious URL

Source: Email

Joe Sandbox AI: AI detected Typosquatting in URL: http://ww38.begantotireo.xyz

Source: http://ww38.begantotireo.xyz/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: http://ww38.begantotireo.xyz/	HTTP Parser: No favicon
Source: http://ww38.begantotireo.xyz/	HTTP Parser: No favicon
Source: http://ww38.begantotireo.xyz/	HTTP Parser: No favicon
Source: https://www.godaddy.com/domainsearch/find?checkAvail=1&domainToCheck=begantotireo.xyz	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49835 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: ww38.begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: ww38.begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: ww38.begantotireo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: ww38.begantotireo.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: begantotireo.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __tad=1732545174.1013120
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OUef84YKAkac+zB&MD=7DP+Rau7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.begantotireo.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3NDQ4YTlhOGNkOTJ8fHwxNzMyNTQ1MTc4LjYxMDN8ZjI5MTc4OTViMzBiMzI0NzI5ZjU3YzRkZTZhNjc4NGQ1ODZkYTE3Ynx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDgwNDZhOWVmODY3NWFjYTRlNDVkNTI5YTE4ZjhhNmRjMDhkMTE1MmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2986208149972408&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107%2C49280903%2C72771954&format=r3%7Cs&nocache=741732545183840&num=0&output=afd_ads&domain_name=ww38.begantotireo.xyz&v=3&bsl=8&pac=2&u_his=1&u_tz=-300&dt=1732545183841&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=697661440&rurl=http%3A%2F%2Fww38.begantotireo.xyz%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5rtaqbsbo4vc&aqid=o4pEZ8bUDonymLAPgauhgQk&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=697661440&csala=6%7C0%7C2876%7C3286%7C477&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sale_form.php?salelink=1&domain_name=begantotireo.xyz HTTP/1.1Host: www.mydomainbuy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sale_form.php?salelink=1&domain_name=begantotireo.xyz HTTP/1.1Host: www.mydomainbuy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=wdwh57h0arz8&aqid=o4pEZ8bUDonymLAPgauhgQk&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=697661440&csala=6%7C0%7C2876%7C3286%7C477&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OUef84YKAkac+zB&MD=7DP+Rau7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: begantotireo.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sale_form.js HTTP/1.1Host: c.parkingcrew.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sale_form.js HTTP/1.1Host: c.parkingcrew.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=67448a9a&token=8046a9ef8675aca4e45d529a18f8a6dc08d1152f HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sale_form.php?salelink=1&domain_name=begantotireo.xyz HTTP/1.1Host: www.mydomainbuy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Source: global traffic	HTTP traffic detected: GET /track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.begantotireo.xyz/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.begantotireo.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg

Source: global traffic	DNS traffic detected: DNS query: begantotireo.xyz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ww38.begantotireo.xyz
Source: global traffic	DNS traffic detected: DNS query: c.parkingcrew.net
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: www.mydomainbuy.com

Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk
Source: chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49835 version: TLS 1.2

Source: classification engine

Classification label: mal56.troj.win@18/35@40/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1968,i,17141759005660411578,10118279808094888985,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://begantotireo.xyz"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1968,i,17141759005660411578,10118279808094888985,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://begantotireo.xyz	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://begantotireo.xyz/	0%	Avira URL Cloud	safe
https://begantotireo.xyz/	0%	Avira URL Cloud	safe
http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh	100%	Avira URL Cloud	malware
http://ww38.begantotireo.xyz/favicon.ico	100%	Avira URL Cloud	malware
http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh	100%	Avira URL Cloud	malware
http://www.mydomainbuy.com/sale_form.php?salelink=1&domain_name=begantotireo.xyz	0%	Avira URL Cloud	safe
https://www.mydomainbuy.com/sale_form.php?salelink=1&domain_name=begantotireo.xyz	0%	Avira URL Cloud	safe
http://ww38.begantotireo.xyz/ls.php?t=67448a9a&token=8046a9ef8675aca4e45d529a18f8a6dc08d1152f	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
701602.parkingcrew.net	13.248.148.254	true	false	high
syndicatedsearch.goog	172.217.19.174	true	false	high
www.mydomainbuy.com	63.33.29.236	true	false	unknown
www.google.com	142.250.181.68	true	false	high
begantotireo.xyz	103.224.212.217	true	true	unknown
c.parkingcrew.net	185.53.178.30	true	false	high
d38psrni17bvxu.cloudfront.net	108.158.71.217	true	false	high
ww38.begantotireo.xyz	unknown	unknown	true	unknown
www.godaddy.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false		high
http://ww38.begantotireo.xyz/ls.php?t=67448a9a&token=8046a9ef8675aca4e45d529a18f8a6dc08d1152f	false	Avira URL Cloud: malware	unknown
https://begantotireo.xyz/	false	Avira URL Cloud: safe	unknown
http://begantotireo.xyz/	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5rtaqbsbo4vc&aqid=o4pEZ8bUDonymLAPgauhgQk&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=697661440&csala=6%7C0%7C2876%7C3286%7C477&lle=0&ifv=1&hpt=1	false		high
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false		high
http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh	false	Avira URL Cloud: malware	unknown
http://c.parkingcrew.net/scripts/sale_form.js	false		high
http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh	false	Avira URL Cloud: malware	unknown
http://ww38.begantotireo.xyz/favicon.ico	false	Avira URL Cloud: malware	unknown
https://www.godaddy.com/domainsearch/find?checkAvail=1&domainToCheck=begantotireo.xyz	false		high
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false		high
http://ww38.begantotireo.xyz/	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=wdwh57h0arz8&aqid=o4pEZ8bUDonymLAPgauhgQk&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=697661440&csala=6%7C0%7C2876%7C3286%7C477&lle=0&ifv=1&hpt=1	false		high
http://www.mydomainbuy.com/sale_form.php?salelink=1&domain_name=begantotireo.xyz	false	Avira URL Cloud: safe	unknown
https://www.mydomainbuy.com/sale_form.php?salelink=1&domain_name=begantotireo.xyz	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://syndicatedsearch.goog	chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	false		high
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_84.2.dr, chromecache_83.2.dr, chromecache_70.2.dr, chromecache_85.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.248.148.254	701602.parkingcrew.net	United States	16509	AMAZON-02US	false
108.158.71.217	d38psrni17bvxu.cloudfront.net	United States	16509	AMAZON-02US	false
63.33.29.236	www.mydomainbuy.com	United States	16509	AMAZON-02US	false
172.217.19.174	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
52.211.100.182	unknown	United States	16509	AMAZON-02US	false
103.224.212.217	begantotireo.xyz	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
76.223.26.96	unknown	United States	16509	AMAZON-02US	false
185.53.178.30	c.parkingcrew.net	Germany	61969	TEAMINTERNET-ASDE	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562439
Start date and time:	2024-11-25 15:31:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://begantotireo.xyz
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.troj.win@18/35@40/12

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.19.238, 64.233.165.84, 34.104.35.123, 199.232.214.172, 192.229.221.95, 172.217.19.226, 23.195.38.15, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, e6001.dscx.akamaiedge.net, partner.googleadservices.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, wildcard-ipv6.godaddy.com.edgekey.net, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://begantotireo.xyz

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: http://begantotireo.xyz Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://begantotireo.xyz
URL: http://ww38.begantotireo.xyz/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://ww38.begantotireo.xyz Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: http://ww38.begantotireo.xyz
URL: http://ww38.begantotireo.xyz/ Model: Joe Sandbox AI	{ "brands": [] }

URL: https://www.godaddy.com/domainsearch/find?checkAvail=1&domainToCheck=begantotireo.xyz Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You don't have permission to access \"http://www.godaddy.com/domainsearch/find?\" on this server.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.godaddy.com/domainsearch/find?checkAvail=1&domainToCheck=begantotireo.xyz Model: Joe Sandbox AI	{ "brands": [] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:32:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9710088870413762
Encrypted:	false
SSDEEP:	48:8idqoTKs5NHRidAKZdA19ehwiZUklqehVy+3:8IfZ2y
MD5:	9E8B774AA8D6923E530FF308657A4115
SHA1:	79CBFCE9B3AD5A1E98248B31C90A2E175196FA5D
SHA-256:	D7AF58CA3DFFE00EAE8458091694C61F000B0E4E21913F22396945FE1CEFA595
SHA-512:	27A07B8D8094F8854D52BAD0CCF1DD091BF269C9E80673BE8FC6320C3A18B1D9809D4A380394D8E04E2EC2F12CD7285FA556AF85DEDAF70F33321E96A3562412
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......2.F?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0d.A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:32:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.985375383977702
Encrypted:	false
SSDEEP:	48:8ddqoTKs5NHRidAKZdA1weh/iZUkAQkqehmy+2:8tfL9Qry
MD5:	E19AD4ADCE4B14A335F81B268A40397B
SHA1:	A2151B8A3ED160E5B0F592CBA57710C4E56ACF4B
SHA-256:	61251A1633E94DB3400B612614A376D6544E29E4E56F67EACE30EF2E9FE4DA96
SHA-512:	BBA41CBD2C007132C979E8ED4276E4CDA5950EDC93490E68C7E2316431084A2E6D5BE277733977F19A04D22188F8F14D9A8F46B808B54C9375B7D7863592A575
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....5%.F?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0d.A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.999521045220765
Encrypted:	false
SSDEEP:	48:8xKdqoTKs5sHRidAKZdA14tseh7sFiZUkmgqeh7sMy+BX:8xQfknyy
MD5:	E857FA40CC97981146C0E5C6684D6021
SHA1:	181AF40EB826407183C8D24FC6B7C7813B9F199E
SHA-256:	E2782367E99049FD74F40AFA70B778440A76650B6A1A507996E630B460318A94
SHA-512:	5B74521124CF687F9EA00832D7AE2705EC9E78550494ADC1F17B48450A4AB4DABB3E620F3C320761DD18813C3922DC8D2DAD0D23607495D85EF0EB5D6B3D4971
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0d.A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:32:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9863300773299595
Encrypted:	false
SSDEEP:	48:8jdqoTKs5NHRidAKZdA1vehDiZUkwqeh6y+R:8rfIUy
MD5:	8BB592C9C86861704D54DF3576D8FC95
SHA1:	66E2DF8A7E0E29074F3BCADA37F5B075820953A7
SHA-256:	E6BD5C3E3F7E952672EA47453121337A5F9C24B3C2F0B001C6DB46405DE44EBB
SHA-512:	23FE46000739D6E1DA7AF165FF01BB9F6C29C2BFF0E904E8133D56C05FEEB133F5D2380346C23C6A6BDE97ACE7689A9165B823D50814FA294F1A589AB8B28B6D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........F?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0d.A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:32:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9746110346400134
Encrypted:	false
SSDEEP:	48:8YdqoTKs5NHRidAKZdA1hehBiZUk1W1qeh4y+C:8efY9Yy
MD5:	AC853BC6D6687F67C646B5C5D8FC0A44
SHA1:	721A5B87CA08E27188205AA2F3FC3C62BC5D81F2
SHA-256:	F281CE7582B137CF3C7BA454DF0CA1DAC7161F096D1641B9E078C97DCF1D4D26
SHA-512:	5B9489ACFB5D7593C3F4BC686FC2D44C73CEBC56053B9F430E71FB8C4BFE4078D84B2B3807A8A1B36C231E3354C6F58AF7D83DED18606054D614481B2CEC55A7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V,.F?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0d.A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 13:32:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9836677201241475
Encrypted:	false
SSDEEP:	48:8ZdqoTKs5NHRidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8Rf2T/TbxWOvTbyy7T
MD5:	68E6A0EE1315A9B520785EF81C8FA257
SHA1:	724F32B4E890BA980C4587F30F0B9F87FF04EE6E
SHA-256:	8AC64554D00566E1AFFEE995D3C9BA3EBD6D036030310819C6BF193CB6931C99
SHA-512:	3106067EB8AAE83CC152B6C8EC6C53F399A74801065725DF27354DBF3F7DA6818C679044E21657E3D1F90A4F743CF19ACBE758358F2E27F3BC89C45B974D9D30
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........F?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY.t....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY.t....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY.t....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY.t..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.t...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........0d.A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	4.695768067919445
Encrypted:	false
SSDEEP:	12:UeKpKct5WuSz7inigFM7xKlwoGEk5Cs+rTKESJ1nHmdUTAcUGslAfC:OpRt5WZjgFm24rCAJAdUTIGslA6
MD5:	64F809E06446647E192FCE8D1EC34E09
SHA1:	5B7CED07DA42E205067AFA88615317A277A4A82C
SHA-256:	F52CBD664986AD7ED6E71C448E2D31D1A16463E4D9B7BCA0C6BE278649CCC4F3
SHA-512:	5F61BBE241F6B8636A487E6601F08A48BFFD62549291DB83C1F05F90D26751841DB43357D7FE500FFBA1BC19A8AB63C6D4767BA901C7EDED5D65A1B443B1DD78
Malicious:	false
Reputation:	low
URL:	http://c.parkingcrew.net/scripts/sale_form.js
Preview:	/. Sales form click tracker. . tlink() will load a 1x1 GIF to track clickouts to the contact form. * Some basic scrambling prevents (a lot of) web scrapers to follow the link. . Date: 2016-03-22.*/..// function tlink(v, wow).// v is a fixed string.// wow will contain the current domain name.function tlink(v, wow) {. if (document.location.search.indexOf('_xas') === -1) {. // define some compenents that will later form the link to the 1x1 GIF. var proto_suf = "tp",. string = "omainb",. parameter = "php?salelink=1";. // generate and load the 1x1 GIF. new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow;. }.}.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	152971
Entropy (8bit):	5.54242539662917
Encrypted:	false
SSDEEP:	1536:Y7X6BPISKCH25pKHGiUPTnAy+xxPjNistHWeNmLWwHZg+T7ubXNCDl1iS7JGLUn2:BY+vBtHWw+/HjTR6SkLUnHwSCyW
MD5:	D6C834FA5BE22539C1F017B3708FCC2E
SHA1:	8018B1F002D7A47E1C6BB47EE9641921683BA0A4
SHA-256:	4EFAF6800044F8F03E9D33616E2FEC7A1C6F11420FA794B564706EF853048C7E
SHA-512:	4904D5140382DF1CF926F6050F0E02DFB16E301C333E91AA39551E00265686FC7DC3388EE822E6FE4C12FA2FA9542A661999461DB95D0EC36C162527D2F6CB6E
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":0,"heterodyne

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.262125911872192
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaXqnRCsDPLCmKvaRlbcaS3jfU0cMLaR/cT:dkK9dg5qEaXScvUCjfZUA
MD5:	E8A55A89CEC5F695FD2CB01C993CDE5F
SHA1:	EB5D333D2200A6A98536A9068246ABAF9A2DE5D7
SHA-256:	4483A92983D390F60BE258963EA5CBFE5BE35B49555CE2802A61C37361A03BD0
SHA-512:	9F155E99886522D0728CE33BA70B249FD552B241E9BDD6369CEC2408642E4BC4D8595E9E6C20A9885CB50D72049B280E3F9A5D3DB4333C851E454684584D2103
Malicious:	false
Reputation:	low
URL:	https://www.godaddy.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.godaddy.com/favicon.ico" on this server.<P>.Reference #18.25c5ce17.1732545192.240e761.<P>https://errors.edgesuite.net/18.25c5ce17.1732545192.240e761</P>.</BODY>.</HTML>.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ww38.begantotireo.xyz/ls.php?t=67448a9a&token=8046a9ef8675aca4e45d529a18f8a6dc08d1152f
Preview:	{"success":true}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15888
Category:	downloaded
Size (bytes):	5981
Entropy (8bit):	7.965363074760963
Encrypted:	false
SSDEEP:	96:EunCVYs6NhylcdvH9SjiwGBiBIH5pCuYrzFMxUAVhnvu+cuTnqEhEFhA7T9OfAzG:EQChW59RwOsIH5p/kKVhvuZmnqjFs9/E
MD5:	7A58DDA2659EBFAFD0498A1BF378A081
SHA1:	31185A2421C08350F2DA647B00394B9A58F2B5FE
SHA-256:	7745397199D921FE7B7A839BAB7203015B611F8D1511B329CE8016977D851E82
SHA-512:	A465E344013A83E25F35B39B50E3CD6ADC01FF871C39D25D3BD6BB107C1014C02C58193913A2841439E3BE5B58E02F17FE6E4950AA69D8BC53644FF9CCA9B5D2
Malicious:	false
Reputation:	low
URL:	http://ww38.begantotireo.xyz/
Preview:	...........[.w.H..l....../,b..1...q.......!. ..-..=....VIB`.I.tf......{o.{.'oj7.....xc.t..>..zjJ....F\|Y.5......v.>.i......]..q^...^.U?.1...h=.[...{.n./.[....u;..N...lT..m\Y.............uS....\.8li.u.T......K...E.zW.\|s...].jt0.].....w.k.>_^........Y.x..}x.)....[.........^...8..]T......c..i.....&..\|>O..i..g.GGG...#.L..Wb.......2......q.$.....J..<ny..r.cL.o....^. ..6P..{...K.b.( K..Jlf...v.....{...g..S.%......L..j.J6..cX..g.z.W....gx&?..jy.g8.N/.O'.....zK..1....s5....U..~s=.Q..;]U...{j..l.x&..K....aw...5..=..N[..x.>.nF.q3.N.o....S..p.c.....X.1..'......xx.W.p'..<.M..)!............$..o"...'.5<......O9.6..6..]n..W=..L=....3...[z...;[.U.3f.p...t......1....m.s...1.:V..a.+La.#.SB...]......Me...0.....:T...b.jF(....".+...D...j.o.^...z.J..B.h.).X.N=.M.9../....rT...L"J...=.?.@...dm....C.;`_9.T.=......Y.oY%....bb...c.....\..X3A....F.[..;..I........%.....TP7.....D.g......S...4K.MH.o.....'1....R.<9i%...h././:.c%U...$e..............

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386), with no line terminators
Category:	dropped
Size (bytes):	386
Entropy (8bit):	5.507840088195778
Encrypted:	false
SSDEEP:	12:xWGMmRQ2RQWb9oVLOlB8u7HypRQ2RQWb9nHDHB8u7n:bKXuxDfzHXu9HDhf7n
MD5:	C28D862260BDA478C85BC281941DA709
SHA1:	7FE7CB4F7E950E249E4DE008566ED786DCABADEA
SHA-256:	7759EA7259F69E4161C80595A44F42EDEB84CF022B3EAA90E4328603430860A5
SHA-512:	6793F7CEAF8C6F1A7DB9574FF5FE158650D54D78EE52E92678D5867E9822A5817E75F09D9F81365BE3602F565F2B1DD8178099DC1C63CDF5ED6C61044DD53BDD
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=2c3a4b3d8ece0165:T=1732545190:RT=1732545190:S=ALNI_MY1jMv3eZzz03dxBHMU2eQh3m1jCA","_expires_":1766241190,"_path_":"/","_domain_":"begantotireo.xyz","_version_":1},{"_value_":"UID=00000f8f809fa7b9:T=1732545190:RT=1732545190:S=ALNI_MbtP3JMnA4gM--mC4Wmlt0HNakKnQ","_expires_":1766241190,"_path_":"/","_domain_":"begantotireo.xyz","_version_":2}]});

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	761
Entropy (8bit):	4.695768067919445
Encrypted:	false
SSDEEP:	12:UeKpKct5WuSz7inigFM7xKlwoGEk5Cs+rTKESJ1nHmdUTAcUGslAfC:OpRt5WZjgFm24rCAJAdUTIGslA6
MD5:	64F809E06446647E192FCE8D1EC34E09
SHA1:	5B7CED07DA42E205067AFA88615317A277A4A82C
SHA-256:	F52CBD664986AD7ED6E71C448E2D31D1A16463E4D9B7BCA0C6BE278649CCC4F3
SHA-512:	5F61BBE241F6B8636A487E6601F08A48BFFD62549291DB83C1F05F90D26751841DB43357D7FE500FFBA1BC19A8AB63C6D4767BA901C7EDED5D65A1B443B1DD78
Malicious:	false
Reputation:	low
Preview:	/. Sales form click tracker. . tlink() will load a 1x1 GIF to track clickouts to the contact form. * Some basic scrambling prevents (a lot of) web scrapers to follow the link. . Date: 2016-03-22.*/..// function tlink(v, wow).// v is a fixed string.// wow will contain the current domain name.function tlink(v, wow) {. if (document.location.search.indexOf('_xas') === -1) {. // define some compenents that will later form the link to the 1x1 GIF. var proto_suf = "tp",. string = "omainb",. parameter = "php?salelink=1";. // generate and load the 1x1 GIF. new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow;. }.}.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14083)
Category:	downloaded
Size (bytes):	14882
Entropy (8bit):	5.495903695296089
Encrypted:	false
SSDEEP:	96:2E/yk2iIlb5lphMzwronb86Lgh3hvLNYrWMT9MVDj5w96DW5dvMVDrw96DHSMVDh:2E12iMpgbLLgh3VLWrXTUWioIUhwZ
MD5:	262F8AADFCAC101DEE0E89C1E33CD09D
SHA1:	25039849CC1D4F938EF43C4398F18D10DE63922F
SHA-256:	B40409726DAA84FD56F1B41972B06F0FCD25E6C759C7D63F1AE8F94AE6A3E64A
SHA-512:	3CDB9418BF11F41FF4EFDF9CF97FAB337FBB10FD8F0765B22B892E6A31F5BA218FA031D3AC39650F41D7494A0256330A07266A994C87D2E0B28DB8CCF30804C4
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.begantotireo.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3NDQ4YTlhOGNkOTJ8fHwxNzMyNTQ1MTc4LjYxMDN8ZjI5MTc4OTViMzBiMzI0NzI5ZjU3YzRkZTZhNjc4NGQ1ODZkYTE3Ynx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDgwNDZhOWVmODY3NWFjYTRlNDVkNTI5YTE4ZjhhNmRjMDhkMTE1MmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2986208149972408&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107%2C49280903%2C72771954&format=r3%7Cs&nocache=741732545183840&num=0&output=afd_ads&domain_name=ww38.begantotireo.xyz&v=3&bsl=8&pac=2&u_his=1&u_tz=-300&dt=1732545183841&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=697661440&rurl=http%3A%2F%2Fww38.begantotireo.xyz%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386), with no line terminators
Category:	downloaded
Size (bytes):	386
Entropy (8bit):	5.501571291019159
Encrypted:	false
SSDEEP:	12:xWY1R9RbmmwBPku7HeAR9RbzEIRLBPku7n:7mXP3zeAAIRtP37n
MD5:	64A6DE9BBFA803EEC74712B66902879E
SHA1:	7CE57FAA4E2176D7002E24CBEEE3383F3FA5EF1F
SHA-256:	F004357F2DDB5EC41DD0377EF4982E182D96F9728C0E563AC1A34EF31858B1FC
SHA-512:	DD97FB264AA9AB6C57E642620F3C75BFE919D9E066A062BA51AAA59A7532FFDE13F052910DD4C591FB7306EE6694D807C64B030343503BC4061397452ABFB053
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ww38.begantotireo.xyz&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg","_expires_":1766241187,"_path_":"/","_domain_":"begantotireo.xyz","_version_":1},{"_value_":"UID=00000f8f807094d3:T=1732545187:RT=1732545187:S=ALNI_MZWqsqYYpmRlLCWCqsmometERxf1g","_expires_":1766241187,"_path_":"/","_domain_":"begantotireo.xyz","_version_":2}]});

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh
Preview:	....................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	152964
Entropy (8bit):	5.542510766911293
Encrypted:	false
SSDEEP:	1536:j7X6BPISKCH25pKHGiUPTnAy+xxPjNistHWeNmLWwHZg+T7ubXNCDl1iS7JGLUn2:kY+vBtHWw+/HjTR6SkLUnHwSCyW
MD5:	DD05C55F2742DB742478834FF922B433
SHA1:	9B80894DE78EE8DB5B9517081F41D98440A0C57E
SHA-256:	286F7B4257DE9D9BED5BB2A9619A10DA91CC577E2E4A8902C0941BE38025B8DE
SHA-512:	59F4AFE6E5DC3775E4192DDC0E1F444447E652B67E6790271C5C2DE9B6AF150FC58E0F244D927B2FF39226BBBAF242FA2309F8DF577E84EE27F429F25BF74E83
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":0,"heterodyne_test":

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	dropped
Size (bytes):	152955
Entropy (8bit):	5.542377358114526
Encrypted:	false
SSDEEP:	1536:r7X6BPISKCH25pKHGiUPTnAy+xxPjNistHWeNmLWwHZg+T7ubXNCDl1iS7JGLUn2:cY+vBtHWw+/HjTR6SkLUnHwSCyW
MD5:	0648B9AA69C4ECFA5E414DEA60DAD90E
SHA1:	04DABA4A5A555DBD7386B760828E3590ACCCB06A
SHA-256:	F7E844A0AE8F3C386229862BAC6B33214E07E91DE096878B6C13D8FF013DF68B
SHA-512:	0C439E494A6796FA69C442AD5FD1AB05BC55A086EC89400740798A66B353BD6634B69CC0D0C57C55D461B14A1063F09B9B024838A68AD9CD693B199CD0E3A745
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":0,"heterodyne_test":372}}};va

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	dropped
Size (bytes):	153001
Entropy (8bit):	5.542578488315501
Encrypted:	false
SSDEEP:	1536:g7X6BPISKCH25pKHGiUPTnAy+xxPjNistHWeNmLWwHZg+T7ubXNCDl1iS7JGLUn2:ZY+vBtHWw+/HjTR6SkLUnHwSCyW
MD5:	2D3BD4B5D5DD92D120FED36ED798DF10
SHA1:	F03F94A967415F50F1931D8D0F7EF5C7770FFB70
SHA-256:	4C03F5032AD94D0E9E3858DF620B218CA0330860274262B2785DEC69E6E9E8B2
SHA-512:	708AA6F4D68A0F72E9E170306DD7BC59B2D4EE1DB751AF9F060412E1CFB3A909CF629BCD4172AEDD148BC76661258D701A28F9A2C4D704A903FC7685CF8120B1
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301520,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableGppApi":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.begantotireo.xyz/track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh
Preview:	....................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 15:32:46.549060106 CET	49675	443	192.168.2.5	23.1.237.91
Nov 25, 2024 15:32:46.557097912 CET	49674	443	192.168.2.5	23.1.237.91
Nov 25, 2024 15:32:46.674108028 CET	49673	443	192.168.2.5	23.1.237.91
Nov 25, 2024 15:32:49.102884054 CET	443	49703	23.1.237.91	192.168.2.5
Nov 25, 2024 15:32:49.102962971 CET	49703	443	192.168.2.5	23.1.237.91
Nov 25, 2024 15:32:52.828269005 CET	49711	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:52.828582048 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:52.948407888 CET	80	49711	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:52.948483944 CET	49711	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:52.948569059 CET	80	49712	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:52.948621035 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:52.948755026 CET	49711	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:53.070393085 CET	80	49711	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:54.295427084 CET	80	49711	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:54.295959949 CET	80	49711	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:54.296042919 CET	49711	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:54.296096087 CET	49711	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:54.579505920 CET	80	49711	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:54.598459959 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:54.598572016 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:54.598654032 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:54.598985910 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:54.599026918 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:54.718010902 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:54.718089104 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:54.718877077 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:54.719058037 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:54.719075918 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:54.844019890 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:54.844118118 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:54.844244957 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:54.846355915 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:54.846402884 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.147438049 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.147742033 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.147783995 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.148308039 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.148374081 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.149319887 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.149370909 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.150361061 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.150453091 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.150537014 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.191355944 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.192996979 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.193031073 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.230411053 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.230484009 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.234308958 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.234333038 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.234694004 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.239686012 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.275115013 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.280445099 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.327346087 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.476767063 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:56.477157116 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:56.477206945 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:56.478686094 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:56.478755951 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:56.484061003 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:56.484188080 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:56.538634062 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:56.538686991 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:32:56.585624933 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:32:56.681025982 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.681133032 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.681202888 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.681524992 CET	49713	443	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:56.681548119 CET	443	49713	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:56.746294975 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.746381044 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.746447086 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.746562004 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.746584892 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.746601105 CET	49715	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.746607065 CET	443	49715	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.781128883 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.781179905 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:56.781250954 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.781538963 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:56.781552076 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:57.300041914 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:32:57.421751022 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:57.421876907 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:32:57.422142029 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:32:57.542188883 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:57.691637993 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:32:57.691695929 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:32:57.691849947 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:32:57.693597078 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:32:57.693619967 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:32:58.314338923 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.314461946 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:58.316040039 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:58.316068888 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.316411972 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.318527937 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:58.363332987 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.851588011 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.851696014 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.851778984 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:58.853071928 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:58.853125095 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.853156090 CET	49716	443	192.168.2.5	23.218.208.109
Nov 25, 2024 15:32:58.853173018 CET	443	49716	23.218.208.109	192.168.2.5
Nov 25, 2024 15:32:58.857527971 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:58.857603073 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:58.857620955 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:58.857633114 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:58.857645035 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:58.857656956 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:32:58.857670069 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:32:58.857754946 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:32:59.024035931 CET	80	49712	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:59.024060965 CET	80	49712	103.224.212.217	192.168.2.5
Nov 25, 2024 15:32:59.024122953 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:32:59.147950888 CET	49720	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:32:59.154726982 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:32:59.178875923 CET	49722	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:32:59.268059969 CET	80	49720	185.53.178.30	192.168.2.5
Nov 25, 2024 15:32:59.268271923 CET	49720	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:32:59.268479109 CET	49720	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:32:59.275063038 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:32:59.275127888 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:32:59.275319099 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:32:59.299387932 CET	80	49722	108.158.71.217	192.168.2.5
Nov 25, 2024 15:32:59.299467087 CET	49722	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:32:59.388627052 CET	80	49720	185.53.178.30	192.168.2.5
Nov 25, 2024 15:32:59.395482063 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:32:59.517585039 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:32:59.517965078 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:32:59.519692898 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:32:59.519714117 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:32:59.520049095 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:32:59.529341936 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:32:59.529390097 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:32:59.529472113 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:32:59.529845953 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:32:59.529855967 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:32:59.569957018 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:00.603411913 CET	80	49720	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:00.612700939 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:00.646909952 CET	49720	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:00.732901096 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:00.761015892 CET	49726	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:00.821633101 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.821696043 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.821752071 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:00.821989059 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822045088 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822097063 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822132111 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822144032 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:00.822210073 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822238922 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:00.822246075 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822279930 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822314024 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.822319984 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:00.822518110 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:00.880745888 CET	49727	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:00.882412910 CET	80	49726	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:00.882497072 CET	49726	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:00.882735014 CET	49726	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:00.942806959 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:00.957546949 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:00.989574909 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:01.001144886 CET	80	49727	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:01.001228094 CET	49727	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:01.003283024 CET	80	49726	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:01.003329039 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.079857111 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:01.086879015 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:01.130531073 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:01.209482908 CET	49730	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:01.211520910 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:01.211599112 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:01.211791039 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:01.334276915 CET	80	49730	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:01.334444046 CET	49730	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:01.334945917 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.335025072 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:01.336544991 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:01.336555004 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.336571932 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:01.336882114 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.338195086 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:01.349756002 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:01.369220972 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:01.395328045 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.491977930 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:01.508641005 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:01.560802937 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.560823917 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.560830116 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.560846090 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.560879946 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.560909986 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:01.560934067 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.560962915 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:01.561027050 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:01.580832005 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.580912113 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:01.580939054 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:01.581058025 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:01.629370928 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:01.629532099 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:01.631819010 CET	49733	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:01.632143974 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:01.649791956 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:01.649889946 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:01.649979115 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:01.650321007 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:01.650372982 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:01.754336119 CET	80	49733	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:01.754411936 CET	49733	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:01.754630089 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:01.864599943 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:01.876365900 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.876424074 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.876444101 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.876560926 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:01.876560926 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:01.876590967 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:01.876701117 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:01.910074949 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:02.070152998 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.070193052 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.070298910 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.070300102 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.070322990 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.070391893 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.114953995 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.114983082 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.115077972 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.115098000 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.115228891 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.244445086 CET	80	49726	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:02.245624065 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.245646000 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.245753050 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.245779037 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.245803118 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.245881081 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.275685072 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.275711060 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.275799990 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.275815010 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.275875092 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.292843103 CET	49726	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:02.301090956 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.301153898 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.301321030 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.301341057 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.301474094 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.320693970 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.320719957 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.320823908 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.320823908 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.320837975 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.327553034 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.442409992 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.442433119 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.442550898 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.442550898 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.442569017 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.443109035 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.462450981 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.462486982 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.462615013 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.462615013 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.462635994 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.462778091 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.479871035 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.479898930 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.480453968 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.480468988 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.480941057 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.496828079 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.496853113 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.497066975 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.497080088 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.497314930 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.508733034 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.508757114 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.508821011 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.508836031 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.508856058 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.508939028 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.519623041 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.519645929 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.520004034 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.520020008 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.521553993 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.524785995 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.524872065 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.524900913 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.524924994 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.524924994 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.524945974 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.524970055 CET	49723	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.524977922 CET	443	49723	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.592659950 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.592809916 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.593267918 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.594608068 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.594657898 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.595071077 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.595338106 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.595406055 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.595455885 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.596992970 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.597016096 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.597126007 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.597209930 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.597228050 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.597354889 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.597368956 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.597489119 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.597497940 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.597556114 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.597569942 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.599222898 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.599241972 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.599488020 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.599637985 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:02.599648952 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:02.776070118 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776258945 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776278973 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776293039 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776313066 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776325941 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776326895 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:02.776338100 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776350975 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776381016 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:02.776398897 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:02.776464939 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776479006 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.776830912 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:02.927862883 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:02.947247982 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:02.947278023 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:02.947293043 CET	49718	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:02.947299957 CET	443	49718	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:02.976353884 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.976368904 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:02.976497889 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:02.984641075 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:03.348546028 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:03.352988005 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:03.353019953 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:03.354202986 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:03.354268074 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:03.355137110 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:03.355214119 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:03.355412006 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:03.355423927 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:03.397614956 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.203933954 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.204065084 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.204129934 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.204184055 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.204298019 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.204402924 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.204416037 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.216984034 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.217046976 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.217063904 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.217092991 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.217139006 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.223212957 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.235930920 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.236005068 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.236038923 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.286727905 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.311175108 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.311707020 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.311750889 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.313545942 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.313559055 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.324851990 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.346049070 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:04.346107960 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:04.346204996 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:04.346411943 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:04.346431971 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:04.366560936 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.366591930 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.378205061 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.378731966 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.378788948 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.379158020 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.379169941 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.395270109 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.395879030 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.395891905 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.401307106 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.401359081 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.401371002 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.412014008 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.412082911 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.412098885 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.425606966 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.425664902 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.425683975 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.439063072 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.439124107 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.439141989 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.452713013 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.452769995 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.452780962 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.457900047 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.458386898 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.458405018 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.459134102 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.459142923 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.467374086 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.467519045 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.467536926 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.480643034 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.480699062 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.480710030 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.491941929 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.491998911 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.492011070 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.504873037 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.504930019 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.504941940 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.516390085 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.516998053 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.517020941 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.517404079 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.517420053 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.517452002 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.517601013 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.517678022 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.517697096 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.517911911 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.517945051 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.518531084 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.518536091 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.530889988 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.530945063 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.530972958 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.543123960 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.543174982 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.543185949 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.584139109 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.589982986 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.592156887 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.592225075 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.592253923 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.600627899 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.600769997 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.600797892 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.606987000 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.607037067 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.607073069 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.616640091 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.616704941 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.616729975 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.626763105 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.626955032 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.626981974 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.638138056 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.638221025 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.638247967 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.649857998 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.649915934 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.649941921 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.660897017 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.660948038 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.660973072 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.673614025 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.673692942 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.673718929 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.684602022 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.684820890 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.684854031 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.695152044 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.695353031 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.695374966 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.705372095 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.705451012 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.705468893 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.715857029 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.716392994 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.716418028 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.725850105 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.725922108 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.725943089 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.734232903 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.734304905 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.734323025 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.743935108 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.744105101 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.744131088 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.751123905 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.751174927 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.751183987 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.759176970 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.759233952 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.759248972 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.765676975 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.765758991 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.765830994 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.766125917 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.766146898 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.766160965 CET	49735	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.766166925 CET	443	49735	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.766654968 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.766746044 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.766757011 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.769834042 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.769884109 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.770036936 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.770322084 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.770333052 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.774511099 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.774580002 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.774605036 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.783406019 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.783463955 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.783488989 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.795012951 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.795097113 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.795121908 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.796627045 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.796699047 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.796716928 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.799714088 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.799792051 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.799807072 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.803570032 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.803616047 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.803636074 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.808237076 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.808295965 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.808319092 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.813359022 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.813400030 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.813421965 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.813647032 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.813798904 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.813863993 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.814452887 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.814472914 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.814483881 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.814491034 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.817416906 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.817457914 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.817517996 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.817961931 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.817975998 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.818240881 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.818285942 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.818295956 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.823296070 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.823354006 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.823369980 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.828373909 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.828855038 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.828875065 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.833643913 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.833745956 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.833775997 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.838680983 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.838737011 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.838759899 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.844094038 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.844146013 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.844168901 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.849325895 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.849591017 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.849615097 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.853720903 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.853773117 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.853784084 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.858561039 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.858597040 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.858618975 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.858628035 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.858679056 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.863584995 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.863997936 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.864053011 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.864845037 CET	49734	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:04.864860058 CET	443	49734	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:04.909542084 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.909605026 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.909708023 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.909730911 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.910008907 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.910096884 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.910409927 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.910409927 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.910433054 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.910442114 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.916407108 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.916460991 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.916582108 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.917017937 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.917037010 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.978838921 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.978866100 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.978996038 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979011059 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979043007 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979046106 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979077101 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979120970 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979146957 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979163885 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979197979 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979223013 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979494095 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979494095 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.979504108 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979660988 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979692936 CET	443	49736	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.979851961 CET	49736	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.980678082 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.980699062 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.980735064 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.980741024 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.983356953 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.983392000 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.983467102 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.983652115 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.983664036 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.984440088 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.984468937 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:04.984606028 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.984703064 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:04.984711885 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:05.012368917 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:05.012411118 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:05.012803078 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:05.013031006 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:05.013042927 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:05.049236059 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:05.049283028 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:05.049346924 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:05.049596071 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:05.049607992 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.094295979 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.094712019 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.094746113 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.096491098 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.096683979 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.097794056 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.097886086 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.149640083 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.149662971 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.193048954 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.193116903 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.193321943 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.197494030 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.311531067 CET	49714	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.311587095 CET	443	49714	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.496483088 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.497108936 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.497144938 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.498650074 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.498662949 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.549397945 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.549901009 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.549978971 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.550347090 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.550360918 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.771199942 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.771631956 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.771662951 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.773142099 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.773222923 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.773624897 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.773708105 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.773766041 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.773776054 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:06.780736923 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.780965090 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.781028986 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.782038927 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.782124043 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.782449961 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.782521009 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.782596111 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.782629967 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.828016043 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:06.828129053 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.828159094 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.828186989 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:06.828907967 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.828922987 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.829418898 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.829423904 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.829745054 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.830246925 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.830272913 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.830719948 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.830729008 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.839982986 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.840501070 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.840528965 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.841034889 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.841039896 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.876055956 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:06.937031031 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.937103987 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.937328100 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.937417984 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.937447071 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.937464952 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.937470913 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.940597057 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.940695047 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:06.940804958 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.940968037 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:06.941003084 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.014132977 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.014241934 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.014306068 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.014456987 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.014478922 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.014489889 CET	49743	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.014496088 CET	443	49743	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.017715931 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.017767906 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.017838955 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.018095016 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.018114090 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.195298910 CET	80	49727	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:07.195372105 CET	49727	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:07.276443005 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.276606083 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.276671886 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.276823997 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.276823997 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.276845932 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.276855946 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.279201984 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.279275894 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.279330015 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.279431105 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.279453039 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.279467106 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.279475927 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.279943943 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.280040026 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.280127048 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.280317068 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.280343056 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.282231092 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.282272100 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.282342911 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.282481909 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.282494068 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.285731077 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.285912037 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.285964966 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.285999060 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.286004066 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.286014080 CET	49744	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.286017895 CET	443	49744	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.289561987 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.289597988 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.289664984 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.289870024 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:07.289890051 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:07.584290981 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.584393024 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.584456921 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.584505081 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.584516048 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.584549904 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.584564924 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.597389936 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.597439051 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.597486019 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.597497940 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.597954988 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.603281021 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.617840052 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.618009090 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.618019104 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.630137920 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.630182028 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.630213022 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.630244017 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.630372047 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.630372047 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.630404949 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.646832943 CET	49727	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:07.647690058 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.647727966 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.647758007 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.647768021 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.647819996 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.651546001 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.669398069 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.671462059 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.671473980 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.672149897 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.704658985 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.719451904 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.751380920 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.751424074 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.751678944 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.751866102 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.751935959 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.752697945 CET	49749	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.752716064 CET	443	49749	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.763920069 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.763966084 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.764070034 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.764318943 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:07.764337063 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:07.767430067 CET	80	49727	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:07.776201963 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.776309013 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.776335001 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.781124115 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.781192064 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.781218052 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.796243906 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.796333075 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.796356916 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.814373016 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.814507961 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.814538002 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.833286047 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.833463907 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.833492994 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.849478006 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.852988005 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.853014946 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.863867998 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.864902973 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.864928961 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.877675056 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.879044056 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.879071951 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.890505075 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.890659094 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.890686989 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.904226065 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.904376030 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.904407024 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.917325020 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.917444944 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.917473078 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.932266951 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.932410002 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.932441950 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.944286108 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.944394112 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.944422960 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.968777895 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.968909979 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.968935013 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.975228071 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.975361109 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.975368023 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.984947920 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:07.985074043 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:07.985085011 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.003546000 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.003608942 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.003623962 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.012299061 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.012346983 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.012356997 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.012372971 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.012655020 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.022813082 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.035854101 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.035936117 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.036010981 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.036041975 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.038177967 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.050323963 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.059767962 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.059936047 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.060003996 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.060039997 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.062979937 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.071310043 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.082554102 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.082643032 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.082657099 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.082690001 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.083039045 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.094166994 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.104310989 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.104398966 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.104402065 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.104445934 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.104486942 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.114238024 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.124195099 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.124299049 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.124300003 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.124337912 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.124386072 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.133460045 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.143223047 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.143265009 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.143332958 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.143358946 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.143740892 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.152228117 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.161252975 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.161323071 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.161406040 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.161432981 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.161957026 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.169575930 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.174838066 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.174906015 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.174912930 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.180211067 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.180294037 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.180331945 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.180339098 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.180382013 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.181622028 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.192935944 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.193419933 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.193542004 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.193557024 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.194307089 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.196283102 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.199486017 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.199878931 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.199892998 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.202831984 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.202898026 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.202909946 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.208131075 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.208201885 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.208216906 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.213238001 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.213331938 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.213344097 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.218283892 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.218362093 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.218369007 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.223134041 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.223206997 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.223211050 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.228179932 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.228271961 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.228277922 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.233076096 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.233143091 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.233160019 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.238039017 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.238097906 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.238116980 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.241749048 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.241800070 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.241818905 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.247033119 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.247097969 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.247103930 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.251862049 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.251931906 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.251955986 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.256660938 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.256766081 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.256772995 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.257240057 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.257275105 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.257283926 CET	443	49747	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:08.257308006 CET	49747	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:08.756870031 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:08.757497072 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:08.757553101 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:08.758960962 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:08.758966923 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:08.803047895 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:08.803729057 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:08.803796053 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:08.804177999 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:08.804186106 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.063606024 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.064140081 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.064189911 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.064591885 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.064600945 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.086920977 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.087511063 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.087564945 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.087949991 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.087956905 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.146806002 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.147324085 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.147361994 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.147758961 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.147767067 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.202956915 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.203082085 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.203164101 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.203299046 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.203335047 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.203366041 CET	49750	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.203375101 CET	443	49750	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.206038952 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.206099987 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.206182957 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.206319094 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.206337929 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.249397039 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.249495983 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.249576092 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.249826908 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.249850988 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.249870062 CET	49751	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.249876022 CET	443	49751	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.252491951 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.252552986 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.252621889 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.252764940 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.252775908 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.507428885 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:09.510588884 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.510677099 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.510778904 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.542633057 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.542718887 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.542794943 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.561923981 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:09.583966970 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:09.584003925 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:09.584657907 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:09.584826946 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.584867001 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.584887981 CET	49752	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.584896088 CET	443	49752	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.586011887 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.586033106 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.586050034 CET	49753	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.586055040 CET	443	49753	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.587285042 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:09.587393999 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:09.587812901 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:09.589854956 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.589909077 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.589972019 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.590833902 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.590892076 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.590948105 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.591201067 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.591216087 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.591336966 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.591352940 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.616405010 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.616486073 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.616563082 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.620719910 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.620719910 CET	49754	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.620742083 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.620757103 CET	443	49754	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.634952068 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.635006905 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.635118008 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.635256052 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:09.635272980 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:09.635343075 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.334074020 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.334130049 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.334165096 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.334201097 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.334225893 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.334258080 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.334275961 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.341748953 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.341831923 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.341849089 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.357393980 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.357498884 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.357522964 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.367080927 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.367146015 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.367152929 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.420386076 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.454274893 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.507792950 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.507821083 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.534703016 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.534818888 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.534837961 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.544254065 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.544347048 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.544353962 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.548408031 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.548465967 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.548471928 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.557497025 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.557671070 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.557677031 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.568618059 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.568799973 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.568805933 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.585000992 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.585185051 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.585194111 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.596441984 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.596607924 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.596622944 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.610562086 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.610667944 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.610697985 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.621851921 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.621933937 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.621951103 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.634268999 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.634354115 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.634362936 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.659653902 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.659872055 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.659883976 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.662408113 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.662471056 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.662478924 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.686680079 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.686783075 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.686794996 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.739448071 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.765192032 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.769159079 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.769232988 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.769243002 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.777132034 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.777215004 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.777228117 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.789258957 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.789459944 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.789469004 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.789482117 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.789526939 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.796938896 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.805391073 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.805474997 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.805483103 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.848445892 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.858128071 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.859960079 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.860023975 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.860033989 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.867904902 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.867994070 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.868000984 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.879609108 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.879714012 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.879719973 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.883661032 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.883713961 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.883738995 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.883744955 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.884533882 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.887864113 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.891904116 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.891973019 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.891978025 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.896332979 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.896414995 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.896420956 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.900289059 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.900347948 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.900353909 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.901308060 CET	49764	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:10.904623985 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.904696941 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.904704094 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.912658930 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.912733078 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.912738085 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.913271904 CET	49765	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:10.916778088 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.916826963 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.916855097 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.916862011 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.916903019 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.920875072 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.925081015 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.925144911 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.925148964 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.925162077 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.925206900 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.929440975 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.933413982 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.933487892 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.933496952 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.937865973 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.937937975 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.937942982 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.942150116 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.942214966 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.942220926 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.980175018 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.980403900 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.980412960 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.982414007 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.982474089 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.982482910 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.986607075 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.986673117 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.986679077 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.994563103 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.994661093 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.994668007 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.998759985 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:10.998828888 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:10.998838902 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.002830029 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.002876043 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.002887964 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.002893925 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.002933025 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.006968021 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.012025118 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.012090921 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.012101889 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.015338898 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.015391111 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.015398026 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.019593000 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.019646883 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.019655943 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.021855116 CET	80	49764	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:11.021929026 CET	49764	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:11.022429943 CET	49764	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:11.024014950 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.024064064 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.024071932 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.027769089 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.027823925 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.027829885 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.034554958 CET	80	49765	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:11.034655094 CET	49765	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:11.035917997 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.035998106 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.036009073 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.036015987 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.036056042 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.040054083 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.040713072 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.040766954 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.040791035 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.040806055 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.040844917 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.041065931 CET	49755	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.041090965 CET	443	49755	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.055416107 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:11.069103003 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.070410967 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.070471048 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.071120977 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.071132898 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.104398966 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.104964018 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.105001926 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.105617046 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.105621099 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.144402027 CET	80	49764	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:11.175793886 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:11.184197903 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.184262991 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.184329033 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.184623957 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:11.184640884 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:11.219218969 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.219890118 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.219938993 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.220509052 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.220515966 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.421039104 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.421770096 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.421806097 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.422142029 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.422149897 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.472742081 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.473326921 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.473351955 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.473783970 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.473788977 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.516000986 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.516069889 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.516235113 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.516355038 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.516381979 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.516396999 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.516402960 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.519501925 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.519545078 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.519643068 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.519821882 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.519834042 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.520622015 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:11.526386976 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:11.553611040 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.553683996 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.553757906 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.553983927 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.554003954 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.554016113 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.554022074 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.557146072 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.557183981 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.557279110 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.557468891 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.557481050 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.567672014 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:11.651243925 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:11.665849924 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.665919065 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.665997028 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.666212082 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.666238070 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.666246891 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.666253090 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.669636011 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.669692993 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.669804096 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.669981956 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.670000076 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.871969938 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.872054100 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.872183084 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.872484922 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.872484922 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.872509956 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.872523069 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.875056982 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.875098944 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.875178099 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.875329018 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.875340939 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.920981884 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.921061993 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.921314955 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.979597092 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:11.992621899 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.992660046 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:11.992675066 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:11.992681980 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:12.008071899 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:12.008135080 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:12.008208036 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:12.009550095 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:12.009567022 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:12.032350063 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:12.359276056 CET	80	49764	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:12.403222084 CET	49764	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:12.506755114 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:12.506809950 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:12.506874084 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:12.507272959 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:12.507287979 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:12.941128016 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:12.941489935 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:12.941518068 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:12.942783117 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:12.942868948 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:12.943234921 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:12.943303108 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:12.943377018 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:12.943386078 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:12.994230986 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.134505033 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.175333023 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.319631100 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.321105003 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.321131945 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.321676016 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.321681976 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.371521950 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.372009039 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.372045994 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.372468948 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.372473955 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.475151062 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.476192951 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.476222992 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.476764917 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.476772070 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.484961033 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.485425949 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.485460997 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.485996008 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.486001968 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.761718988 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.761792898 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.761828899 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.761843920 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.761889935 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.761928082 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.761933088 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.770445108 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.770519018 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.770574093 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.771940947 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.771965027 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.771984100 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.771990061 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.775002956 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.775053024 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.775120020 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.775146961 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.775165081 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.775177956 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.775192976 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.775233984 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.775475979 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.775490999 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.781418085 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.784189939 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.784368038 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.784418106 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.784965038 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.785002947 CET	443	49741	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.785017967 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.785046101 CET	49741	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.792349100 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.793153048 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.793189049 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.793706894 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.793714046 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.793945074 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.794023991 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.794039965 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.817051888 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.817123890 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.817233086 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.818900108 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.818923950 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.818937063 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.818943977 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.821773052 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.821810961 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.822114944 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.822273970 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.822285891 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.848925114 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.882172108 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.920578957 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.920644999 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.920870066 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.921189070 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.921217918 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.921235085 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.921241999 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.924088955 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.924141884 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.924290895 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.924679041 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.924695015 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.927766085 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.927783966 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.930156946 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.930238962 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.930464029 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.930504084 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.930519104 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.930532932 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.930538893 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.933132887 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.933170080 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.933227062 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.933403015 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:13.933418989 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:13.962917089 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.962995052 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.963016987 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.967262983 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.967336893 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.967350960 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.976703882 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.976758957 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.976777077 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.985379934 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.985426903 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.985446930 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.996997118 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:13.997174978 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:13.997188091 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.010822058 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.010965109 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.010982990 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.024245977 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.024307966 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.024324894 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.037098885 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.037245035 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.037261963 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.049891949 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.049948931 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.049966097 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.062757969 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.062807083 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.062824011 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.075594902 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.075653076 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.075668097 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.088383913 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.088538885 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.088556051 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.101461887 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.101517916 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.101532936 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.137221098 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.137506962 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.137537956 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.138444901 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.138510942 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.139682055 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.139781952 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.139849901 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.144855976 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.164664984 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.166604996 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.166662931 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.166681051 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.171252012 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.171305895 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.171329975 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.175854921 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.175920010 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.175935030 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.183173895 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.183228016 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.183239937 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.183334112 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.186337948 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.186381102 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.186389923 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.192773104 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.192796946 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.193447113 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.193504095 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.193516016 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.205363035 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.205419064 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.205434084 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.216207027 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.216259956 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.216274023 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.227711916 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.227762938 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.227776051 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.239204884 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:14.239283085 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:14.239346027 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:14.239814997 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.239871979 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.239881992 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.242038012 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:14.242077112 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:14.242095947 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:14.242103100 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:14.244167089 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.251055002 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.252662897 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.252675056 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.260629892 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.260688066 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.260699987 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.269258976 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:14.269328117 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:14.269399881 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:14.269809961 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:14.269821882 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:14.270469904 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.270539045 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.270553112 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.280405998 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.280513048 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.280539989 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.290091991 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.290143013 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.290154934 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.299048901 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.299118042 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.299127102 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.307632923 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.307698011 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.307710886 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.315912008 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.315967083 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.315982103 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.325001955 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.325117111 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.325129986 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.332690954 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.332803011 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.332814932 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.341103077 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.341167927 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.341181993 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.348228931 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.348277092 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.348297119 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.351249933 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.351300955 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.351320982 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.367263079 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.367325068 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.367338896 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.367357016 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.367389917 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.370014906 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.372417927 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.372478962 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.372502089 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.375103951 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.375148058 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.375160933 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.378688097 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.378747940 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.378760099 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.382796049 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.382879972 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.382903099 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.386787891 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.386841059 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.386853933 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.394293070 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.394355059 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.394366980 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.396699905 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.396871090 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.396881104 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.410696030 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.410743952 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.410758018 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.411751986 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.411789894 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.411798000 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.417054892 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.417095900 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.417117119 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.417128086 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.417167902 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.418457031 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.428517103 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.428553104 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.428611994 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.428627014 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.428669930 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.428854942 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.428935051 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.428976059 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.430754900 CET	49766	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:14.430775881 CET	443	49766	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:14.723361969 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.723459005 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.723572016 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.724586010 CET	49772	443	192.168.2.5	52.211.100.182
Nov 25, 2024 15:33:14.724608898 CET	443	49772	52.211.100.182	192.168.2.5
Nov 25, 2024 15:33:14.730288982 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:14.850214005 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:14.870107889 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:14.870156050 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:14.870230913 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:14.870445013 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:14.870457888 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:15.189661980 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:33:15.193604946 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:15.237834930 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:33:15.313656092 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:15.546406031 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.546933889 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.546972990 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.547384977 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.547393084 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.603106976 CET	80	49720	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:15.606050968 CET	49720	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:15.668891907 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:15.672094107 CET	49720	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:15.718540907 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.719109058 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.719192982 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.719579935 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.719602108 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.723781109 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:15.725764036 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.726281881 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.726351023 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.726690054 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.726705074 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.766634941 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.767241955 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.767273903 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.767729998 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:15.767738104 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:15.793441057 CET	80	49720	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:16.068859100 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.068947077 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.069017887 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.069250107 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.069281101 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.069295883 CET	49773	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.069300890 CET	443	49773	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.072432995 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.072475910 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.072552919 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.072690964 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.072699070 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.155946970 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.156023979 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.156075001 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.163355112 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.163398027 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.163414001 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.163419962 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.170824051 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.170881987 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.171142101 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.171367884 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.171385050 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.179512024 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.179579020 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.179630041 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.182589054 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.182620049 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.182635069 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.182640076 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.185712099 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.189721107 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.189758062 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.190236092 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.190244913 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.191165924 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:16.191221952 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:16.191440105 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:16.191706896 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:16.191729069 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:16.197585106 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.197635889 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.197745085 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.198076010 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.198088884 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.213324070 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.213392019 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.213454008 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.222265959 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.222290993 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.228876114 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.228945017 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.229037046 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.229231119 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.229247093 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.486685038 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:16.487807989 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:16.487828970 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:16.488857031 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:16.488996029 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:16.491345882 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:16.491409063 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:16.491847992 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:16.491858959 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:16.535036087 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:16.641839981 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.641918898 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.642271996 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.642513037 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.642534971 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.642551899 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.642559052 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.645375013 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.645414114 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:16.645482063 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.645632982 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:16.645642042 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.015439034 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:17.015634060 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:17.016026020 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:17.017019033 CET	49778	443	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:17.017045021 CET	443	49778	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:17.244878054 CET	80	49726	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:17.244942904 CET	49726	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:17.861814976 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.862329006 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:17.862351894 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.862781048 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:17.862786055 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.921797991 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.922360897 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:17.922401905 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.922800064 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:17.922811031 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:17.931209087 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:17.931575060 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:17.931612015 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:17.931911945 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:17.932236910 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:17.932306051 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:17.932379007 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:17.975344896 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:17.982279062 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:18.012150049 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.012717962 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.012757063 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.013196945 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.013201952 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.025100946 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.025652885 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.025691986 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.026099920 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.026109934 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.303246975 CET	49726	80	192.168.2.5	185.53.178.30
Nov 25, 2024 15:33:18.308062077 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.308136940 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.308300972 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.308573961 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.308589935 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.308599949 CET	49779	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.308608055 CET	443	49779	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.311022997 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.311081886 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.311196089 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.311386108 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.311398983 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.358314991 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.358397961 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.358480930 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.358711004 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.358727932 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.358741999 CET	49782	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.358747959 CET	443	49782	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.361803055 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.361875057 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.361952066 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.362134933 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.362147093 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.423337936 CET	80	49726	185.53.178.30	192.168.2.5
Nov 25, 2024 15:33:18.457089901 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.457273006 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.457365036 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.457478046 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.457478046 CET	49783	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.457525969 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.457552910 CET	443	49783	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.460326910 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.460380077 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.460537910 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.460753918 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.460774899 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.479134083 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.479295015 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.479373932 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.479448080 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.479449034 CET	49780	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.479491949 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.479532003 CET	443	49780	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.482021093 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.482108116 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.482314110 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.482374907 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.482393980 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.501348019 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.501890898 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.501981020 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.502413988 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.502429962 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.778362036 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:18.778445005 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:18.779082060 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:18.779123068 CET	443	49781	172.217.19.174	192.168.2.5
Nov 25, 2024 15:33:18.779145002 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:18.779145956 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:18.779304981 CET	49781	443	192.168.2.5	172.217.19.174
Nov 25, 2024 15:33:18.959820986 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.959908009 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.960062027 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.960203886 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.960205078 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.960256100 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.960283995 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.962954044 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.963010073 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:18.963685036 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.964894056 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:18.964929104 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.079402924 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.079917908 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.079955101 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.080369949 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.080375910 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.165304899 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.165855885 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.165880919 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.166321039 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.166327000 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.308517933 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.309719086 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.309758902 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.310180902 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.310185909 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.515568018 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.515728951 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.515816927 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.515952110 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.515979052 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.515990973 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.515996933 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.519697905 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.519743919 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.519838095 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.520250082 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.520262957 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.625610113 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.625778913 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.625875950 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.625920057 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.625920057 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.625947952 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.625961065 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.629286051 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.629312992 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.629443884 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.629667997 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.629679918 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.693727016 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.694375992 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.694401979 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.694785118 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.694791079 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.786870003 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.786950111 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.787128925 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.787198067 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.787221909 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.787237883 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.787242889 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.790900946 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.790941954 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.791157007 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.791403055 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.791418076 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.805819035 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.806381941 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.806400061 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:20.806821108 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:20.806826115 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.144692898 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.144773960 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.145797968 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.145797968 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.148834944 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.148863077 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.149560928 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.149615049 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.152724028 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.153635025 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.153659105 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.257610083 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.257688046 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.257783890 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.258335114 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.258335114 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.258358002 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.258368969 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.261441946 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.261491060 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:21.261571884 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.261874914 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:21.261888981 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.264234066 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.264856100 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.264899015 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.265328884 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.265336037 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.461030006 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.461721897 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.461749077 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.462177992 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.462184906 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.585486889 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.586071968 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.586116076 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.586550951 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.586556911 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.708575964 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.708744049 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.708811045 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.708947897 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.708971977 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.708985090 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.708991051 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.712412119 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.712454081 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.712625980 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.712865114 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.712877035 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.910891056 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.910979986 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.911056042 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.911408901 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.911434889 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.911448002 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.911453962 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.914871931 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.914916039 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.915138960 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.915365934 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.915376902 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.947540998 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.948090076 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.948107958 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:22.948621988 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:22.948627949 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.050244093 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.050769091 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.050801992 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.051311016 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.051326036 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.079878092 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.079976082 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.080146074 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.080198050 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.080221891 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.080243111 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.080251932 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.082912922 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.082958937 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.083100080 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.083350897 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.083364010 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.393146038 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.393230915 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.393408060 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.393443108 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.393465996 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.393476963 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.393482924 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.396285057 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.396326065 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.396395922 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.396610975 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.396619081 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.499010086 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.499093056 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.499149084 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.499329090 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.499347925 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.499363899 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.499370098 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.502377987 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.502434015 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:23.502542973 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.502703905 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:23.502717972 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.537995100 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.538589001 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.538610935 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.539155006 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.539160013 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.638495922 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.639070034 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.639111042 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.639552116 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.639559031 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.981558084 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.981640100 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.981762886 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.981950045 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.981972933 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.982018948 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.982026100 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.983406067 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.983851910 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.983860970 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.984329939 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.984334946 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.985040903 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.985096931 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:24.985192060 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.985321045 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:24.985337973 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.077203035 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.077389956 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.077627897 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.077857018 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.077888012 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.077907085 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.077913046 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.082447052 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.082501888 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.082585096 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.082799911 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.082817078 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.214144945 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.214632988 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.214652061 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.215183020 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.215188026 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.351070881 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.351520061 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.351597071 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.351984024 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.352001905 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.441051006 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.441129923 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.441421986 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.441519022 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.441544056 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.441556931 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.441562891 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.450546026 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.450669050 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.450743914 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.450942039 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.450970888 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.671267033 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.671341896 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.671544075 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.671588898 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.671602964 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.671612978 CET	49799	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.671621084 CET	443	49799	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.674422979 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.674468040 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.674547911 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.674696922 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.674705029 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.814160109 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.814229965 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.814300060 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.814470053 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.814513922 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.814548016 CET	49800	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.814564943 CET	443	49800	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.817459106 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.817507029 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:25.817790985 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.817989111 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:25.818001032 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:26.711745024 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:26.712292910 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:26.712327957 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:26.712866068 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:26.712872982 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:26.899640083 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:26.900227070 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:26.900279045 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:26.900712013 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:26.900717974 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.155611038 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.155688047 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.155764103 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.155966043 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.156021118 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.156053066 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.156070948 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.158895016 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.158942938 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.159189939 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.159296036 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.159321070 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.244960070 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.245594978 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.245652914 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.246066093 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.246083975 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.346666098 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.346826077 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.346966982 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.347085953 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.347085953 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.347135067 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.347163916 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.350263119 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.350286961 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.350471020 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.350647926 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.350661039 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.416441917 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.417010069 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.417062998 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.417506933 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.417515039 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.612385035 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.612967968 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.613002062 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.613466978 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.613473892 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.693919897 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.694036961 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.694214106 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.694303989 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.694303989 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.694350958 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.694377899 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.697194099 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.697264910 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.697346926 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.697516918 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.697536945 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.864378929 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.864459038 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.864667892 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.864721060 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.864721060 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.864744902 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.864754915 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.868159056 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.868275881 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:27.868382931 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.868540049 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:27.868571043 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:28.061821938 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:28.061897993 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:28.062084913 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:28.062150002 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:28.062170982 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:28.062181950 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:28.062191010 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:28.064908981 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:28.064970016 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:28.065052986 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:28.065192938 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:28.065226078 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.110212088 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.110821962 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.110850096 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.111522913 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.111529112 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.233511925 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.234042883 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.234082937 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.234549046 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.234555006 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.502790928 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.513135910 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.513181925 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.514358044 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.514364958 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.557446957 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.557528973 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.557637930 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.557924986 CET	49806	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.557949066 CET	443	49806	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.561249018 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.561304092 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.561372042 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.561775923 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.561790943 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.676111937 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.676666021 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.676760912 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.677299976 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.677315950 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.686295033 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.686371088 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.686537027 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.686588049 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.686609983 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.686624050 CET	49807	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.686630964 CET	443	49807	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.689174891 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.689198971 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.689265013 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.689430952 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.689439058 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.935229063 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.935734987 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.935765028 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.936192989 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.936197042 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.947464943 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.947626114 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.947700024 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.947937965 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.947954893 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.947969913 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.947982073 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.950776100 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.950820923 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:29.950892925 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.951092958 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:29.951107025 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.123867989 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.123941898 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.124012947 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.124202967 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.124224901 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.124238014 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.124245882 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.127279043 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.127321959 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.127392054 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.127593040 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.127603054 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.500842094 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.500921965 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.501144886 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.501185894 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.501185894 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.501202106 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.501210928 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.503878117 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.503936052 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.504093885 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.504302979 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:30.504319906 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:30.635723114 CET	80	49722	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:30.635819912 CET	49722	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:31.329402924 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.330718994 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.330718994 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.330785990 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.330820084 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.614090919 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.614666939 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.614695072 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.615269899 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.615276098 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.787750006 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.787841082 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.787957907 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.788068056 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.788116932 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.788149118 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.788165092 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.791363955 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.791410923 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.791558027 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.791743994 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.791758060 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.896634102 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.899786949 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.899815083 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:31.900388956 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:31.900393963 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.043538094 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.044121027 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.044153929 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.044720888 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.044728041 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.069859028 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.069955111 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.070034027 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.070239067 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.070260048 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.070281982 CET	49812	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.070290089 CET	443	49812	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.073651075 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.073688984 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.073776960 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.073954105 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.073965073 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.305824995 CET	49722	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:32.324888945 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.325584888 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.325618029 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.326189041 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.326195002 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.342000961 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.342190027 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.342266083 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.342391014 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.342416048 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.342432976 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.342438936 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.345613956 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.345658064 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.347048044 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.347202063 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.347210884 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.427608967 CET	80	49722	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:32.499191999 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.499289989 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.499386072 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.499566078 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.499583960 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.499598980 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.499603987 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.502836943 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.502885103 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.502945900 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.503088951 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.503106117 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.646266937 CET	80	49730	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:32.646365881 CET	49730	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:32.778733969 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.778909922 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.779048920 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.779048920 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.779198885 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.779218912 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.782290936 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.782350063 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:32.782537937 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.782650948 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:32.782660961 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:33.614794970 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:33.615375042 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:33.615461111 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:33.616033077 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:33.616048098 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:33.916517019 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:33.918827057 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:33.918848038 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:33.919934988 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:33.919944048 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.060276985 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.060493946 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.060558081 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.060611010 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.060630083 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.060642004 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.060647011 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.063772917 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.063817978 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.064013958 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.064189911 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.064199924 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.157083035 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.157664061 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.157676935 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.158288956 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.158293962 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.310172081 CET	49730	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:34.365478039 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.365556955 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.365665913 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.365875006 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.365875006 CET	49817	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.365896940 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.365911007 CET	443	49817	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.368808985 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.368870020 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.369038105 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.369240046 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.369257927 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.392781973 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.393263102 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.393284082 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.393757105 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.393763065 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.430325031 CET	80	49730	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:34.574822903 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.575453043 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.575479984 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.576193094 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.576200008 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.601735115 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.601897955 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.601973057 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.602037907 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.602066994 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.602082014 CET	49818	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.602087975 CET	443	49818	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.604865074 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.604907990 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.605192900 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.605371952 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.605386019 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.865722895 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.865787029 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.866131067 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.866131067 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.866131067 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.869690895 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.869739056 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:34.869848013 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.869949102 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:34.869961977 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.026401997 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.026479959 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.026562929 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.026794910 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.026808023 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.026830912 CET	49820	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.026837111 CET	443	49820	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.029839993 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.029886007 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.029997110 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.030173063 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.030185938 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.169356108 CET	49819	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.169384956 CET	443	49819	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.851171017 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.851835966 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.851859093 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:35.852286100 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:35.852291107 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.220211029 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.220709085 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.220742941 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.221177101 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.221183062 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.298508883 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.298593998 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.298655987 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.298947096 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.298966885 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.299052000 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.299060106 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.301851034 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.301907063 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.301975012 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.302196980 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.302213907 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.396641970 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.397222996 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.397252083 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.397639990 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.397644997 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.591919899 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.592350960 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.592387915 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.593297958 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.593307018 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.674710989 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.674777985 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.674882889 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.674988031 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.675009012 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.675025940 CET	49822	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.675030947 CET	443	49822	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.677746058 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.677784920 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.678020000 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.678193092 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.678204060 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.784145117 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.784657001 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.784684896 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.785140038 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.785145998 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.842984915 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.843071938 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.843256950 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.843305111 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.843333960 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.843349934 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.843355894 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.846191883 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.846231937 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:36.846344948 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.846518993 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:36.846530914 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.074862957 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.074948072 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.075026035 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.075198889 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.075198889 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.075246096 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.075272083 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.078013897 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.078067064 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.078224897 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.078371048 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.078389883 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.228933096 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.228995085 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.229057074 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.229231119 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.229248047 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.229265928 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.229271889 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.232059956 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.232098103 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:37.232357979 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.232398033 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:37.232409000 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.113540888 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.114223957 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.114305019 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.114733934 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.114748955 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.459292889 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.459875107 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.459911108 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.460357904 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.460364103 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.569133997 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.569158077 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.569217920 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.569233894 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.569304943 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.569547892 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.569547892 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.569592953 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.569619894 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.572505951 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.572549105 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.572695017 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.572900057 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.572912931 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.679456949 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.680396080 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.680396080 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.680422068 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.680439949 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.903053999 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.903548956 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.903583050 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.904064894 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.904071093 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.908476114 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.908554077 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.908770084 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.908770084 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.908816099 CET	49827	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.908833981 CET	443	49827	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.911528111 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.911570072 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:38.911710978 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.911966085 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:38.911979914 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.087692976 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.088172913 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.088215113 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.088702917 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.088711023 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.126596928 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.126751900 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.126964092 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.126964092 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.127002001 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.127016068 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.129626036 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.129662991 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.129935026 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.130069017 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.130084991 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.360601902 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.360641956 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.360937119 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.360966921 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.361115932 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.361115932 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.361135960 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.361294031 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.361329079 CET	443	49829	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.363349915 CET	49829	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.363684893 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.363728046 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.363852978 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.364408970 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.364422083 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.409400940 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:39.409437895 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:39.409605026 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:39.409881115 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:39.409890890 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:39.540364981 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.540393114 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.540608883 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.540631056 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.540749073 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.540749073 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.540756941 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.540790081 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.540942907 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.540976048 CET	443	49830	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.541148901 CET	49830	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.543580055 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.543610096 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:39.543787956 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.543853045 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:39.543859005 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.378027916 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.378571987 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.378653049 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.379034042 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.379050016 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.704524040 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.705498934 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.705498934 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.705532074 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.705549002 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.842961073 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.843029022 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.843503952 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.843590975 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.843728065 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.843728065 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.843769073 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.843875885 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.844002008 CET	443	49831	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.844243050 CET	49831	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.846487999 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.846525908 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:40.846649885 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.846857071 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:40.846870899 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.013278961 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.014256954 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.014256954 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.014281988 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.014291048 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.083606958 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.084109068 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.084132910 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.084702015 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.084707022 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.157244921 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.160443068 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.160562992 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.160562992 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.160599947 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.160614014 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.163517952 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.163563013 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.163827896 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.163827896 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.163866997 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.168648958 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.168720007 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.172344923 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.172349930 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.172569990 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.181190014 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.223331928 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.268768072 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.269731998 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.269732952 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.269756079 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.269762039 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.474562883 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.477377892 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.477492094 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.477492094 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.477627039 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.477646112 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.480263948 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.480318069 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.480535984 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.480535984 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.480566025 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.532913923 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.535794020 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.535892010 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.535945892 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.535945892 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.535964966 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.535974026 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.538722038 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.538755894 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.538980961 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.539074898 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.539083958 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.707573891 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.710855961 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.710975885 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.711056948 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.711076021 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.711090088 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.711097002 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.714059114 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.714085102 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.714149952 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.714328051 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:41.714338064 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:41.879920959 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.879951000 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.879966021 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.880043983 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.880062103 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.880116940 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.917464018 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.917504072 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.917531013 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.917540073 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.917552948 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.917604923 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.917604923 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.917794943 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.917808056 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:41.917829037 CET	49835	443	192.168.2.5	52.149.20.212
Nov 25, 2024 15:33:41.917835951 CET	443	49835	52.149.20.212	192.168.2.5
Nov 25, 2024 15:33:42.581732988 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:42.582400084 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:42.582422972 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:42.583193064 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:42.583198071 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:42.963701010 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:42.964232922 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:42.964277983 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:42.964704037 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:42.964710951 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.022591114 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.025899887 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.026184082 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.026184082 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.026339054 CET	49837	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.026362896 CET	443	49837	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.028971910 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.029007912 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.029170036 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.029266119 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.029277086 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.265110016 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.265655041 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.265681028 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.266148090 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.266155005 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.423156023 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.423355103 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.423463106 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.423463106 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.423619032 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.423638105 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.426047087 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.426094055 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.426254988 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.426374912 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.426386118 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.432559013 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.433104992 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.433128119 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.433716059 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.433721066 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.567739964 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.568737984 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.568737984 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.568758011 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.568767071 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.700675964 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.703243017 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.703406096 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.703460932 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.703480005 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.703490019 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.703495979 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.706089973 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.706131935 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.706196070 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.706366062 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.706379890 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.889256001 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.892302990 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.892378092 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.892435074 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.892460108 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.892471075 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.892477989 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.895332098 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.895371914 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:43.895440102 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.895608902 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:43.895620108 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.022365093 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.025737047 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.025862932 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.025952101 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.025952101 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.025964975 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.025974035 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.028894901 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.028935909 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.029035091 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.029207945 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.029225111 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.036051989 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:33:44.156358004 CET	80	49712	103.224.212.217	192.168.2.5
Nov 25, 2024 15:33:44.852516890 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.853473902 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.853473902 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:44.853497982 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:44.853507042 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.453511953 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.454535961 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.454535961 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.454569101 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.454582930 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.652034044 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.655016899 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.655208111 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.655469894 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.655488014 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.658586025 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.658622026 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.658714056 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.658862114 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.658874989 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.910029888 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.913110018 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.913166046 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.913189888 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.913232088 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.913301945 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.913378000 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.913393974 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.913407087 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.913414001 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.916781902 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.916827917 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.916924000 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.917066097 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.917077065 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.952158928 CET	49721	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:45.973542929 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.974169970 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.974196911 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.974576950 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.974591017 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.993935108 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.994430065 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.994445086 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:45.995155096 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:45.995161057 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.000272989 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.008698940 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.008729935 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.009210110 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.009216070 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.072218895 CET	80	49721	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:46.550473928 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.551367998 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.553186893 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.553282976 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.553323984 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.553353071 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.553364992 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.553370953 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.554393053 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.554435968 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.554444075 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.554486990 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.554521084 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.554533958 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.554543972 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.554548979 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.555469990 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.556391001 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.556443930 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.556595087 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.556747913 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.556765079 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.556987047 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.557025909 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.557092905 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.557267904 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.557284117 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.558792114 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.558900118 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.558939934 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.558952093 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.559016943 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.559022903 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.561546087 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.561559916 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.561628103 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.561774015 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:46.561784983 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:46.767287970 CET	49733	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:33:46.889343977 CET	80	49733	76.223.26.96	192.168.2.5
Nov 25, 2024 15:33:47.448743105 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.449255943 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.449299097 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.449707031 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.449716091 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.712299109 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.712827921 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.712860107 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.713279963 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.713285923 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.899439096 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.902810097 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.902894020 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.902987957 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.903014898 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.903028965 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.903037071 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.905915976 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.905981064 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.906049013 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.906198025 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:47.906209946 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:47.981523037 CET	49728	80	192.168.2.5	108.158.71.217
Nov 25, 2024 15:33:48.103533030 CET	80	49728	108.158.71.217	192.168.2.5
Nov 25, 2024 15:33:48.207972050 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.211319923 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.211385965 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.211430073 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.211452961 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.211472034 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.211479902 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.214227915 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.214268923 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.214364052 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.214533091 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.214545965 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.288326979 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.288861036 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.288898945 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.289304972 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.289309978 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.381447077 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.382224083 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.382261038 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.382769108 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.382774115 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.400671959 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.401175976 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.401223898 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.401654959 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.401662111 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.735846996 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.735899925 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.735969067 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.736155987 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.736201048 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.736201048 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.736219883 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.736229897 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.739186049 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.739236116 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.739500046 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.739500046 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.739536047 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.826078892 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.829066992 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.829130888 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.829231024 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.829256058 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.829284906 CET	49851	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.829293966 CET	443	49851	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.832194090 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.832242012 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.832498074 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.832498074 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.832540035 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.846451998 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.849463940 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.849699020 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.849699020 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.849992990 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.850013971 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.852144957 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.852190018 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:48.852318048 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.852421045 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:48.852437019 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:49.687649965 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:49.688218117 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:49.688256025 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:49.688653946 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:49.688658953 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:49.998891115 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:49.999491930 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:49.999531031 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:49.999957085 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:49.999963999 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.136821985 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.139264107 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.139350891 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.139390945 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.139410019 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.139424086 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.139430046 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.142326117 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.142371893 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.142456055 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.142599106 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.142613888 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.529892921 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.530555964 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.530589104 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.531013966 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.531018972 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.628009081 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.631261110 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.631334066 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.631352901 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.631427050 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.631509066 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.631534100 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.631548882 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.631556988 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.634664059 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.634708881 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.634787083 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.634996891 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.635013103 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.712061882 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.716578007 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.716629982 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.717444897 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.717457056 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.738104105 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.738648891 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.738678932 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.739109993 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.739115953 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.986285925 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.986392975 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.986458063 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.986649036 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.986673117 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.986686945 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.986692905 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.989816904 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.989872932 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:50.989959955 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.990125895 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:50.990139008 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.159470081 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.159554958 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.159634113 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.159857035 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.159888029 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.159904957 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.159914017 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.163116932 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.163172960 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.163320065 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.163453102 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.163475990 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.193063021 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.196820021 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.196906090 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.196918964 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.196974993 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.197026014 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.197052002 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.197067022 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.197074890 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.199798107 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.199851990 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:51.199928999 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.200074911 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:51.200088024 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.065136909 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.065747976 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.065787077 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.066117048 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.066123962 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.517455101 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.517914057 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.517946005 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.518402100 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.518409967 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.519814014 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.523055077 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.523116112 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.523185015 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.523202896 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.523214102 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.523220062 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.526698112 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.526738882 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.526804924 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.526951075 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.526967049 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.716200113 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.716847897 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.716881037 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.717381001 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.717385054 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.815963030 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.816658020 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.816694975 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:52.817454100 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:52.817460060 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.034017086 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.034670115 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.034699917 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.035120964 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.035126925 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.044492960 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.046993017 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.047087908 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.047127962 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.047154903 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.047166109 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.047173023 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.050102949 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.050148010 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.050219059 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.050405025 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.050420046 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.150914907 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.151093960 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.151149035 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.151197910 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.151251078 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.151475906 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.151496887 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.151510954 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.151519060 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.154817104 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.154880047 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.155003071 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.155222893 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.155242920 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.272551060 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.272644043 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.272730112 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.272990942 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.273009062 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.273019075 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.273025990 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.276331902 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.276370049 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.276458979 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.276617050 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.276628971 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.482588053 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.485768080 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.485836029 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.485950947 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.485979080 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.485996008 CET	49862	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.486004114 CET	443	49862	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.488990068 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.489043951 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:53.489124060 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.489305019 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:53.489320993 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.303391933 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:33:54.304152966 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:33:54.425920010 CET	80	49712	103.224.212.217	192.168.2.5
Nov 25, 2024 15:33:54.426045895 CET	49712	80	192.168.2.5	103.224.212.217
Nov 25, 2024 15:33:54.432698011 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.433898926 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.433936119 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.434535980 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.434541941 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.523514986 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:54.523576021 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:54.523644924 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:54.523914099 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:54.523927927 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:54.835674047 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.836282969 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.836324930 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.836751938 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.836757898 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.889270067 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.892402887 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.892497063 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.892539024 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.892559052 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.892570019 CET	49863	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.892575979 CET	443	49863	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.895550966 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.895591974 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.895683050 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.895878077 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.895894051 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.945091009 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.945729971 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.945760965 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:54.946207047 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:54.946216106 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.062062979 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.062719107 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.062762976 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.063177109 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.063183069 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.280987978 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.281579018 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.281610012 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.282046080 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.282057047 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.285108089 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.288362026 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.288424015 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.288431883 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.288485050 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.288542986 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.288564920 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.288575888 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.288583040 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.291203022 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.291261911 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.291362047 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.291523933 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.291538000 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.391670942 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.394766092 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.394829035 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.394879103 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.394906998 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.394922972 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.394932032 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.397905111 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.397949934 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.398020983 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.398194075 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.398207903 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.515899897 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.518791914 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.518855095 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.518995047 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.519015074 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.519026041 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.519032001 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.522078037 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.522125959 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.522192955 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.522362947 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.522382975 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.725481033 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.728765011 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.728832960 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.728882074 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.728905916 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.728919029 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.728934050 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.732316017 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.732383013 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:55.732456923 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.732779026 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:55.732799053 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:56.040522099 CET	49765	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:56.168221951 CET	80	49765	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:56.327079058 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:56.327387094 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:56.327414989 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:56.327863932 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:56.328222990 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:56.328299999 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:33:56.374732971 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:33:56.757993937 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:56.758651018 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:56.758690119 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:56.759186983 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:56.759197950 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.012176991 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.012787104 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.012821913 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.013288021 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.013293028 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.168786049 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.169434071 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.169497013 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.169869900 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.169877052 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.222057104 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.224939108 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.224997997 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.225008965 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.225063086 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.225135088 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.225159883 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.225167036 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.225172997 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.228327990 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.228375912 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.228480101 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.228625059 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.228641033 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.242239952 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.242748976 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.242785931 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.243242979 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.243252993 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.368460894 CET	49764	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:33:57.449490070 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.452440023 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.452534914 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.452595949 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.452611923 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.452644110 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.452649117 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.455282927 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.455332041 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.455435991 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.455559969 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.455579042 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.488440990 CET	80	49764	63.33.29.236	192.168.2.5
Nov 25, 2024 15:33:57.573069096 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.573695898 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.573719025 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.574136972 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.574142933 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.613924026 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.618093967 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.618200064 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.618240118 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.618263960 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.618274927 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.618287086 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.620824099 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.620852947 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.620925903 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.621093988 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.621108055 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.682044983 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.685125113 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.685197115 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.685255051 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.685278893 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.685291052 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.685298920 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.688177109 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.688255072 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:57.688338041 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.688536882 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:57.688585043 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.020883083 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.021019936 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.021085024 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.021111965 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.021157980 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.021209002 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.021303892 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.021317005 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.021332026 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.021337986 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.024378061 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.024426937 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:58.024496078 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.024646044 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:58.024661064 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.018558979 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.019598961 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.019617081 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.020128965 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.020138979 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.318279028 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.319231987 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.319261074 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.319812059 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.319817066 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.404474020 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.405096054 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.405128002 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.405698061 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.405704975 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.416953087 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.417416096 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.417448997 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.417989969 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.417995930 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.480637074 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.483709097 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.483851910 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.483905077 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.483905077 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.483927011 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.483937025 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.486962080 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.487013102 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.487092972 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.487375975 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.487392902 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.780380964 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.783412933 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.783469915 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.783488035 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.783535957 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.783616066 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.783632994 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.783647060 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.783652067 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.786946058 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.787019968 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.787101030 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.787328959 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.787345886 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.893273115 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.896361113 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.896439075 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.896498919 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.896521091 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.896531105 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.896537066 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.899334908 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.899374962 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.899476051 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.899605989 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.899620056 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.907397032 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.910514116 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.910562038 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.910581112 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.910629988 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.910703897 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.910723925 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.910738945 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.910744905 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.913254023 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.913635015 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.913691044 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.913697958 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.913719893 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.913759947 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.913899899 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.913918018 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:33:59.914144993 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:33:59.914150000 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.196599007 CET	49717	80	192.168.2.5	13.248.148.254
Nov 25, 2024 15:34:00.317534924 CET	80	49717	13.248.148.254	192.168.2.5
Nov 25, 2024 15:34:00.369215965 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.371417046 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.371495962 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:00.371541023 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:00.371561050 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.371571064 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:00.371576071 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.374352932 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:00.374398947 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.374475956 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:00.374615908 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:00.374629974 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:00.680887938 CET	49731	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:34:00.801922083 CET	80	49731	76.223.26.96	192.168.2.5
Nov 25, 2024 15:34:01.311522007 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.312145948 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.312246084 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.312608004 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.312633991 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.507277966 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.507864952 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.507898092 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.508317947 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.508323908 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.707779884 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.708367109 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.708406925 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.708842039 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.708848953 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.752562046 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.753173113 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.753199100 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.753843069 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.753849983 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.760716915 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.763675928 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.763750076 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.763745070 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.763830900 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.763911963 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.763911963 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.763957977 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.763986111 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.766711950 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.766751051 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.766824007 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.767004967 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.767021894 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.949331045 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.952625990 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.952774048 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.952896118 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.952948093 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.952980995 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.952997923 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.955703974 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.955749989 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:01.955823898 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.955965042 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:01.955979109 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.154443026 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.157213926 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.157315969 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.157406092 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.157407045 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.157458067 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.157484055 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.160126925 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.160172939 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.160254002 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.160398960 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.160413027 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.207334995 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.210474968 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.210516930 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.210616112 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.210638046 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.210716963 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.210736990 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.210750103 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.210756063 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.213952065 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.213996887 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.214065075 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.214205027 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.214220047 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.225754976 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.226305962 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.226320982 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.226762056 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.226767063 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.308357954 CET	49733	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:34:02.431745052 CET	80	49733	76.223.26.96	192.168.2.5
Nov 25, 2024 15:34:02.431819916 CET	49733	80	192.168.2.5	76.223.26.96
Nov 25, 2024 15:34:02.674119949 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.677557945 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.677719116 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.677902937 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.677902937 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.677923918 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.677937031 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.680841923 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.680887938 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:02.680975914 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.681107998 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:02.681123018 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.560235977 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.560831070 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:03.560854912 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.561311007 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:03.561316013 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.674743891 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.675426006 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:03.675445080 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.675885916 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:03.675892115 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.897027016 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.897677898 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:03.897702932 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:03.898391962 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:03.898396969 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.006422997 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.007025003 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.007057905 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.007500887 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.007504940 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.014108896 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.017127991 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.017220974 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.017282009 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.017302036 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.017313004 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.017319918 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.020184040 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.020224094 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.020301104 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.020438910 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.020453930 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.117182016 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.120034933 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.120100021 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.120100021 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.120158911 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.120218039 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.120234966 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.120248079 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.120254040 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.123203993 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.123241901 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.123330116 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.123505116 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.123518944 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.386495113 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.387393951 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.387511969 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.387552023 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.387552023 CET	49886	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.387572050 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.387583017 CET	443	49886	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.390609026 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.390654087 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.390760899 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.390935898 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.390953064 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.456899881 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.456991911 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.457031965 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.457039118 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.457102060 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.457253933 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.457272053 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.457278013 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.457283974 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.460599899 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.460658073 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.460726023 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.460916996 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.460932970 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.480087042 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.480659008 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.480695009 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.481131077 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.481138945 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.929132938 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.932202101 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.932276011 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.932385921 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.932409048 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.932421923 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.932431936 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.942428112 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.942527056 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:04.942632914 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.942888021 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:04.942914963 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:05.810529947 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:05.811343908 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:05.811364889 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:05.811841965 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:05.811846018 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:05.972284079 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:05.973086119 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:05.973126888 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:05.973550081 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:05.973556995 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.009728909 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:34:06.009784937 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:34:06.009836912 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:34:06.139023066 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.139559984 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.139581919 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.140049934 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.140058041 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.271339893 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.271420002 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.271527052 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.271764994 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.271790028 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.271820068 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.271828890 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.274797916 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.274843931 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.274943113 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.275108099 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.275119066 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.303297043 CET	49868	443	192.168.2.5	142.250.181.68
Nov 25, 2024 15:34:06.303337097 CET	443	49868	142.250.181.68	192.168.2.5
Nov 25, 2024 15:34:06.309623003 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.310161114 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.310180902 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.310614109 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.310621023 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.426212072 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.429608107 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.429697990 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.429755926 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.429755926 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.429780006 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.429794073 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.432470083 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.432518005 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.432594061 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.432735920 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.432745934 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.575184107 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.578382015 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.578423977 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.578454018 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.578494072 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.578542948 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.578566074 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.578572989 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.578581095 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.581217051 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.581300974 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.581414938 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.581577063 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.581607103 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.754487038 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.757513046 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.757607937 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.757663012 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.757687092 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.757709026 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.757716894 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.760617971 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.760665894 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:06.760812044 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.761025906 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:06.761040926 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.066905022 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.067739964 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.067786932 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.068140984 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.068147898 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.227592945 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.228296995 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.228389025 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.228662014 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.228679895 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.316457033 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.317065954 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.317143917 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.317415953 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.317431927 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.511578083 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.514576912 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.514791965 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.514791965 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.514791965 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.517615080 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.517654896 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.517733097 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.517863035 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.517877102 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.557269096 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.557895899 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.557930946 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.558351994 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.558358908 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.672432899 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.675615072 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.675719976 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.675852060 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.675852060 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.675909996 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.675977945 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.678431034 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.678486109 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.678556919 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.678715944 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.678729057 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.753098965 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.756107092 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.756201982 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.756239891 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.756259918 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.756269932 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.756275892 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.759247065 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.759289980 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.759380102 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.759541988 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.759548903 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:08.817652941 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:08.817701101 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.002890110 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.006552935 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.006688118 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.006745100 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.006762028 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.006791115 CET	49897	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.006797075 CET	443	49897	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.009579897 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.009625912 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.009706020 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.009838104 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.009854078 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.815491915 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.816235065 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.816306114 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:09.816700935 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:09.816714048 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.166213036 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.166713953 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.166778088 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.167152882 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.167181969 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.287167072 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.290116072 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.290190935 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.290216923 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.290251017 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.290322065 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.290340900 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.290376902 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.290384054 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.293127060 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.293162107 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.293246984 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.293421030 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.293435097 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.419667006 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.420428991 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.420456886 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.420871019 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.420876980 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.551151037 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.551862001 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.551894903 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.552304029 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.552314997 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.631664991 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.635116100 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.635210037 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.635250092 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.635250092 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.635270119 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.635278940 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.638192892 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.638252974 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.638348103 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.638535976 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.638555050 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.729361057 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.729993105 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.730034113 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.730452061 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.730459929 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.854995012 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.858241081 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.858361959 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.858418941 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.858436108 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.858457088 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.858464003 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.861300945 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.861327887 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.861407995 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.861588955 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:10.861599922 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:10.999181986 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.002288103 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.002384901 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.002425909 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.002444029 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.002453089 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.002460003 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.005599022 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.005680084 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.005783081 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.005954981 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.005990028 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.165858030 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.168880939 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.168957949 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.168991089 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.169014931 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.169084072 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.169132948 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.169151068 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.169162035 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.169167995 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.172286034 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.172334909 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:11.172421932 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.172602892 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:11.172617912 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.127437115 CET	80	49765	63.33.29.236	192.168.2.5
Nov 25, 2024 15:34:12.127499104 CET	49765	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:34:12.139998913 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.148960114 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.148979902 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.152546883 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.152553082 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.318217993 CET	49765	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:34:12.358593941 CET	80	49764	63.33.29.236	192.168.2.5
Nov 25, 2024 15:34:12.358676910 CET	49764	80	192.168.2.5	63.33.29.236
Nov 25, 2024 15:34:12.424655914 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.425262928 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.425292015 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.425749063 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.425755024 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.438194990 CET	80	49765	63.33.29.236	192.168.2.5
Nov 25, 2024 15:34:12.598469973 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.601593018 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.601833105 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.601833105 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.601833105 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.604787111 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.604859114 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.604954004 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.605099916 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.605125904 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.646756887 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.647423983 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.647444963 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.647737980 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.647742987 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.857475996 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.858074903 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.858115911 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.858701944 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.858714104 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.911154985 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.911195040 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.923634052 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.926774025 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.926853895 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.926913023 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.926938057 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.926951885 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.926958084 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.929730892 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.929754972 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:12.929846048 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.929997921 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:12.930010080 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.026067972 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.026761055 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.026788950 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.027275085 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.027281046 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.095469952 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.098294020 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.098426104 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.098426104 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.098472118 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.098489046 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.101198912 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.101231098 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.101320982 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.101509094 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.101521015 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.323990107 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.324059010 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.324121952 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.324172020 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.324208021 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.324269056 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.324568033 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.324568987 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.324600935 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.324645996 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.327533007 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.327560902 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.328115940 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.328250885 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.328263998 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.479202032 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.482451916 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.482497931 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.482530117 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.482546091 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.482603073 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.482654095 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.482669115 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.482677937 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.482683897 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.485264063 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.485282898 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 15:34:13.485389948 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.485543013 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 15:34:13.485551119 CET	443	49911	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 15:32:50.249166012 CET	53	54783	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:50.260432959 CET	53	56402	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:51.915731907 CET	61891	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:51.915860891 CET	65042	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:52.827264071 CET	53	65042	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:52.827338934 CET	53	61891	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:53.033185959 CET	53	58647	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:54.298757076 CET	57012	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:54.299251080 CET	55174	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:54.467078924 CET	51981	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:54.467262030 CET	63640	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:54.596904993 CET	53	57012	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:54.597822905 CET	53	55174	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:54.716824055 CET	53	51981	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:54.716844082 CET	53	63640	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:56.683927059 CET	61238	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:56.684092045 CET	65216	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:57.294934988 CET	53	65216	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:57.294965029 CET	53	61238	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:58.891457081 CET	57310	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:58.891912937 CET	50767	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:58.912910938 CET	61110	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:58.913098097 CET	62256	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:32:59.132354975 CET	53	57310	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:59.145837069 CET	53	61110	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:59.147543907 CET	53	50767	1.1.1.1	192.168.2.5
Nov 25, 2024 15:32:59.154289961 CET	53	62256	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:00.622433901 CET	59287	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:00.622724056 CET	49630	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:00.759979010 CET	53	49630	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:00.760303020 CET	53	59287	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:00.947557926 CET	58505	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:00.948054075 CET	63607	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.085952044 CET	53	58505	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.086334944 CET	53	63607	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.368630886 CET	52986	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.368796110 CET	50624	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.369668961 CET	51408	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.369959116 CET	52404	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.507865906 CET	53	52986	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.508012056 CET	53	50624	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.508356094 CET	53	51408	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.508385897 CET	53	52404	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.510235071 CET	64682	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.510338068 CET	56145	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:01.648158073 CET	53	64682	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:01.648403883 CET	53	56145	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:04.206618071 CET	65112	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:04.206722975 CET	52934	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:04.344290018 CET	53	52934	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:04.344523907 CET	53	65112	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:04.874206066 CET	63631	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:04.874315023 CET	56620	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:04.904083014 CET	63652	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:04.904448986 CET	59745	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:05.011493921 CET	53	63631	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:05.011806011 CET	53	56620	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:05.041879892 CET	53	63652	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:05.042156935 CET	53	59745	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:09.983335018 CET	53	59635	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:10.358062983 CET	57994	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:10.358629942 CET	61394	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:10.385721922 CET	61587	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:10.386640072 CET	53940	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:10.397775888 CET	60514	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:10.398029089 CET	52737	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:10.900098085 CET	53	52737	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:10.900471926 CET	53	60514	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:11.045167923 CET	60805	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:11.045317888 CET	59147	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:11.183062077 CET	53	60805	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:11.183643103 CET	53	59147	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:12.362705946 CET	49178	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:12.363189936 CET	59490	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:12.504882097 CET	53	49178	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:12.504903078 CET	53	59490	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:14.729863882 CET	64133	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:14.730024099 CET	59238	53	192.168.2.5	1.1.1.1
Nov 25, 2024 15:33:14.868066072 CET	53	59238	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:14.869592905 CET	53	64133	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:28.993721008 CET	53	53310	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:49.848354101 CET	53	59586	1.1.1.1	192.168.2.5
Nov 25, 2024 15:33:51.576797009 CET	53	64090	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 15:32:51.915731907 CET	192.168.2.5	1.1.1.1	0x7b0	Standard query (0)	begantotireo.xyz	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:51.915860891 CET	192.168.2.5	1.1.1.1	0x453a	Standard query (0)	begantotireo.xyz	65	IN (0x0001)	false
Nov 25, 2024 15:32:54.298757076 CET	192.168.2.5	1.1.1.1	0xe797	Standard query (0)	begantotireo.xyz	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:54.299251080 CET	192.168.2.5	1.1.1.1	0xe7f3	Standard query (0)	begantotireo.xyz	65	IN (0x0001)	false
Nov 25, 2024 15:32:54.467078924 CET	192.168.2.5	1.1.1.1	0x89bf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:54.467262030 CET	192.168.2.5	1.1.1.1	0xbc66	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 15:32:56.683927059 CET	192.168.2.5	1.1.1.1	0xe032	Standard query (0)	ww38.begantotireo.xyz	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:56.684092045 CET	192.168.2.5	1.1.1.1	0xf543	Standard query (0)	ww38.begantotireo.xyz	65	IN (0x0001)	false
Nov 25, 2024 15:32:58.891457081 CET	192.168.2.5	1.1.1.1	0xa00f	Standard query (0)	c.parkingcrew.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:58.891912937 CET	192.168.2.5	1.1.1.1	0x570b	Standard query (0)	c.parkingcrew.net	65	IN (0x0001)	false
Nov 25, 2024 15:32:58.912910938 CET	192.168.2.5	1.1.1.1	0xecd2	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:58.913098097 CET	192.168.2.5	1.1.1.1	0xef1a	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Nov 25, 2024 15:33:00.622433901 CET	192.168.2.5	1.1.1.1	0x12ff	Standard query (0)	c.parkingcrew.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:00.622724056 CET	192.168.2.5	1.1.1.1	0x6436	Standard query (0)	c.parkingcrew.net	65	IN (0x0001)	false
Nov 25, 2024 15:33:00.947557926 CET	192.168.2.5	1.1.1.1	0xb581	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:00.948054075 CET	192.168.2.5	1.1.1.1	0xd530	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Nov 25, 2024 15:33:01.368630886 CET	192.168.2.5	1.1.1.1	0x4fbc	Standard query (0)	ww38.begantotireo.xyz	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.368796110 CET	192.168.2.5	1.1.1.1	0x3033	Standard query (0)	ww38.begantotireo.xyz	65	IN (0x0001)	false
Nov 25, 2024 15:33:01.369668961 CET	192.168.2.5	1.1.1.1	0x1a1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.369959116 CET	192.168.2.5	1.1.1.1	0xd02	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:01.510235071 CET	192.168.2.5	1.1.1.1	0x501a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.510338068 CET	192.168.2.5	1.1.1.1	0x70e6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:04.206618071 CET	192.168.2.5	1.1.1.1	0x9a43	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:04.206722975 CET	192.168.2.5	1.1.1.1	0xeed1	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Nov 25, 2024 15:33:04.874206066 CET	192.168.2.5	1.1.1.1	0x7772	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:04.874315023 CET	192.168.2.5	1.1.1.1	0x1ce3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:04.904083014 CET	192.168.2.5	1.1.1.1	0x832c	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:04.904448986 CET	192.168.2.5	1.1.1.1	0xe978	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Nov 25, 2024 15:33:10.358062983 CET	192.168.2.5	1.1.1.1	0x529d	Standard query (0)	www.godaddy.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:10.358629942 CET	192.168.2.5	1.1.1.1	0x397e	Standard query (0)	www.godaddy.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:10.385721922 CET	192.168.2.5	1.1.1.1	0x7953	Standard query (0)	www.godaddy.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:10.386640072 CET	192.168.2.5	1.1.1.1	0xb42a	Standard query (0)	www.godaddy.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:10.397775888 CET	192.168.2.5	1.1.1.1	0x9bf6	Standard query (0)	www.mydomainbuy.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:10.398029089 CET	192.168.2.5	1.1.1.1	0x903d	Standard query (0)	www.mydomainbuy.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:11.045167923 CET	192.168.2.5	1.1.1.1	0xa35a	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:11.045317888 CET	192.168.2.5	1.1.1.1	0xc77f	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Nov 25, 2024 15:33:12.362705946 CET	192.168.2.5	1.1.1.1	0xaefd	Standard query (0)	www.mydomainbuy.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:12.363189936 CET	192.168.2.5	1.1.1.1	0xfe5	Standard query (0)	www.mydomainbuy.com	65	IN (0x0001)	false
Nov 25, 2024 15:33:14.729863882 CET	192.168.2.5	1.1.1.1	0x5daa	Standard query (0)	www.mydomainbuy.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:14.730024099 CET	192.168.2.5	1.1.1.1	0xa695	Standard query (0)	www.mydomainbuy.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 15:32:52.827338934 CET	1.1.1.1	192.168.2.5	0x7b0	No error (0)	begantotireo.xyz		103.224.212.217	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:54.596904993 CET	1.1.1.1	192.168.2.5	0xe797	No error (0)	begantotireo.xyz		103.224.212.217	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:54.716824055 CET	1.1.1.1	192.168.2.5	0x89bf	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:54.716844082 CET	1.1.1.1	192.168.2.5	0xbc66	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 15:32:57.294934988 CET	1.1.1.1	192.168.2.5	0xf543	No error (0)	ww38.begantotireo.xyz	701602.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:32:57.294965029 CET	1.1.1.1	192.168.2.5	0xe032	No error (0)	ww38.begantotireo.xyz	701602.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:32:57.294965029 CET	1.1.1.1	192.168.2.5	0xe032	No error (0)	701602.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:57.294965029 CET	1.1.1.1	192.168.2.5	0xe032	No error (0)	701602.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:59.132354975 CET	1.1.1.1	192.168.2.5	0xa00f	No error (0)	c.parkingcrew.net		185.53.178.30	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:59.145837069 CET	1.1.1.1	192.168.2.5	0xecd2	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.217	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:59.145837069 CET	1.1.1.1	192.168.2.5	0xecd2	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.212	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:59.145837069 CET	1.1.1.1	192.168.2.5	0xecd2	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.61	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:32:59.145837069 CET	1.1.1.1	192.168.2.5	0xecd2	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.113	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:00.760303020 CET	1.1.1.1	192.168.2.5	0x12ff	No error (0)	c.parkingcrew.net		185.53.178.30	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.085952044 CET	1.1.1.1	192.168.2.5	0xb581	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.217	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.085952044 CET	1.1.1.1	192.168.2.5	0xb581	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.61	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.085952044 CET	1.1.1.1	192.168.2.5	0xb581	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.212	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.085952044 CET	1.1.1.1	192.168.2.5	0xb581	No error (0)	d38psrni17bvxu.cloudfront.net		108.158.71.113	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.507865906 CET	1.1.1.1	192.168.2.5	0x4fbc	No error (0)	ww38.begantotireo.xyz	701602.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:33:01.507865906 CET	1.1.1.1	192.168.2.5	0x4fbc	No error (0)	701602.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.507865906 CET	1.1.1.1	192.168.2.5	0x4fbc	No error (0)	701602.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.508012056 CET	1.1.1.1	192.168.2.5	0x3033	No error (0)	ww38.begantotireo.xyz	701602.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:33:01.508356094 CET	1.1.1.1	192.168.2.5	0x1a1	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.508385897 CET	1.1.1.1	192.168.2.5	0xd02	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 15:33:01.648158073 CET	1.1.1.1	192.168.2.5	0x501a	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:01.648403883 CET	1.1.1.1	192.168.2.5	0x70e6	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 15:33:04.344523907 CET	1.1.1.1	192.168.2.5	0x9a43	No error (0)	syndicatedsearch.goog		172.217.19.174	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:05.011493921 CET	1.1.1.1	192.168.2.5	0x7772	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:05.011806011 CET	1.1.1.1	192.168.2.5	0x1ce3	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 15:33:05.041879892 CET	1.1.1.1	192.168.2.5	0x832c	No error (0)	syndicatedsearch.goog		172.217.19.174	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:10.757426023 CET	1.1.1.1	192.168.2.5	0x529d	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:33:10.757591009 CET	1.1.1.1	192.168.2.5	0x7953	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:33:10.760596991 CET	1.1.1.1	192.168.2.5	0x397e	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:33:10.760679007 CET	1.1.1.1	192.168.2.5	0xb42a	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 15:33:10.900471926 CET	1.1.1.1	192.168.2.5	0x9bf6	No error (0)	www.mydomainbuy.com		63.33.29.236	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:10.900471926 CET	1.1.1.1	192.168.2.5	0x9bf6	No error (0)	www.mydomainbuy.com		52.211.100.182	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:10.900471926 CET	1.1.1.1	192.168.2.5	0x9bf6	No error (0)	www.mydomainbuy.com		52.213.188.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:11.183062077 CET	1.1.1.1	192.168.2.5	0xa35a	No error (0)	syndicatedsearch.goog		172.217.19.174	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:12.504882097 CET	1.1.1.1	192.168.2.5	0xaefd	No error (0)	www.mydomainbuy.com		52.211.100.182	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:12.504882097 CET	1.1.1.1	192.168.2.5	0xaefd	No error (0)	www.mydomainbuy.com		63.33.29.236	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:12.504882097 CET	1.1.1.1	192.168.2.5	0xaefd	No error (0)	www.mydomainbuy.com		52.213.188.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:14.869592905 CET	1.1.1.1	192.168.2.5	0x5daa	No error (0)	www.mydomainbuy.com		63.33.29.236	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:14.869592905 CET	1.1.1.1	192.168.2.5	0x5daa	No error (0)	www.mydomainbuy.com		52.213.188.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 15:33:14.869592905 CET	1.1.1.1	192.168.2.5	0x5daa	No error (0)	www.mydomainbuy.com		52.211.100.182	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

begantotireo.xyz

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

ww38.begantotireo.xyz

www.google.com

syndicatedsearch.goog

www.mydomainbuy.com

c.parkingcrew.net

d38psrni17bvxu.cloudfront.net

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	103.224.212.217	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:32:52.948755026 CET	431	OUT	GET / HTTP/1.1 Host: begantotireo.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:32:54.295427084 CET	286	IN	HTTP/1.1 302 Found date: Mon, 25 Nov 2024 14:32:54 GMT server: Apache set-cookie: __tad=1732545174.1013120; expires=Thu, 23-Nov-2034 14:32:54 GMT; Max-Age=315360000 location: https://begantotireo.xyz/ content-length: 0 content-type: text/html; charset=UTF-8 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	13.248.148.254	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:32:57.422142029 CET	436	OUT	GET / HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:32:58.857527971 CET	1236	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Mon, 25 Nov 2024 14:32:58 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_rsRAQIHk6vkJ+hlvG8t92M2VGGa0xOKGS329l4EzcuAYo7EU/gc9sTWsAh6RdY6Nhtwe8dDGPhrhGho50zuYLQ== X-Domain: begantotireo.xyz X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: ww38 Transfer-Encoding: chunked Data Raw: 37 37 64 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5b e9 77 da 48 b6 ff 6c ff 15 15 fa 8c c1 2f 2c 62 b3 b1 31 ce c3 c6 b1 71 07 bc 84 c4 86 9c bc 1c 21 15 20 10 12 2d 89 cd 3d fe df df ef 56 49 42 60 9c 49 fa 74 66 be 8c 13 1b a9 96 7b 6f dd ba 7b 15 27 6f 6a 37 e7 ad f6 ed 05 1b 78 63 f3 74 f7 84 3e 98 ae 7a 6a 4a d5 bb a6 ad 8d 46 7c 59 89 35 de cf e7 b5 bb f6 f5 ef 76 a7 3e 98 69 cd ea dd c5 d9 d9 5d b5 f6 71 5e 9d 7f ac 5e 9f 55 3f fc 31 ad bd bf 68 3d de 5b ca 95 a3 14 7b 9f 6e 0f 2f ae 5b 87 87 8b b6 75 3b be ef 4e 1a cb c2 6c 54 fa bd 6d 5c 59 a3 e6 84 eb d6 f0 a6 da bc d6 d4 c7 da a3 f6 fb dd 75 53 b1 1e 7f ef 5c 7f 38 6c 69 c6 75 ad 54 b5 af 1e 7f cf 16 4b e7 d5 f9 45 b5 7a 57 a9 7c 73 dc fb ea 5d fd 6a 74 30 1b 5d bf 1d 98 b3 cb 92 77 94 6b e4 3e 5f 5e aa ca e2 e6 f7 cb 8f f9 dc 91 59 b8 78 d2 a6 d5 b6 7d 78 f1 29 d3 d7 8e dc d6 83 5b 1d 1c dc eb ed 83 e6 c0 9b f3 92 5e bb bc 1d 38 83 cb 81 5d 54 9e a6 ed 0f 00 1c 63 8b b1 69 b9 95 d8 c0 f3 26 c7 99 cc 7c 3e 4f cf f3 69 db e9 67 b2 47 47 47 [TRUNCATED] Data Ascii: 77d[wHl/,b1q! -=VIB`Itf{o{'oj7xct>zjJF\|Y5v>i]q^^U?1h=[{n/[u;NlTm\YuS\8liuTKEzW\|s]jt0]wk>_^Yx}x)[^8]Tci&\|>OigGGG#LWb2q$J<nyr
Nov 25, 2024 15:32:58.857603073 CET	1236	IN	Data Raw: 63 4c 93 6f 95 98 c7 17 5e 86 20 95 99 36 50 1d 97 7b 95 a9 d7 4b 95 62 99 28 20 4b 1d f3 4a 6c 66 f0 f9 c4 76 bc c8 f4 b9 a1 7b 83 8a ce 67 86 c6 53 e2 25 c9 0c cb f0 0c d5 4c b9 9a 6a f2 4a 36 c9 dc 81 63 58 a3 94 67 a7 7a 86 57 b1 ec 10 b6 67 Data Ascii: cLo^ 6P{Kb( KJlfv{gS%LjJ6cXgzWgx&?jyg8N/O'.zK1s5U~s=Q;]U{jlx&Kaw5=N[x>nFq3NoSpcX1'xxWp'<M)!
Nov 25, 2024 15:32:58.857620955 CET	1236	IN	Data Raw: 01 22 81 59 19 3b 96 15 d1 55 d8 38 f7 33 8a 43 c5 17 97 40 21 7d d2 04 8b 5f 7a 5d 88 ce 6a 37 85 88 fa e6 0a f1 87 0a b5 14 9a b3 b6 3f 32 fe 23 bc eb 11 21 b5 ac 84 2a 65 8c d5 3e 48 17 3a 44 09 f7 b1 68 c8 b8 b3 fe 5b e4 a4 e5 ae ea f2 83 42 Data Ascii: "Y;U83C@!}_z]j7?2#!*e>H:Dh[B,kES_/+3^wI'7PYjO^+Z}y}Y76fau8?zQn5hUgyQ}X79/v^QF7WkuEG
Nov 25, 2024 15:32:58.857633114 CET	1236	IN	Data Raw: d4 8d 82 c2 10 41 c7 c7 89 aa 91 59 00 0f 15 c1 e5 67 19 f4 91 4c c9 5d ef da 8b 33 3a 31 59 13 ad 75 d9 79 29 1e 81 fc 84 20 a2 b8 83 3d fc 28 6c 5d dd 9a 4c 69 bd d9 5c 64 19 28 80 f1 48 f7 99 08 c9 b7 2c 77 35 ee 6c 8a fa 8c 15 0e f4 9c 69 94 Data Ascii: AYgL]3:1Yuy) =(l]Li\d(H,w5li-(XE?"r$/-sGkqQv=fU}jzeWC]J7F/_-6^-14[BtjbslF<1~[wgpG_gX
Nov 25, 2024 15:32:58.857645035 CET	1236	IN	Data Raw: c2 de 54 58 ae f8 43 db fc ee 87 b6 87 44 63 4f 53 7b c8 92 7d 91 10 a4 ec 39 5c 75 6d ab 62 23 82 70 7e 4a 30 b0 75 24 b8 3e 47 04 e5 82 70 ac e6 4d b4 51 2c 07 0b 79 d1 86 ed 89 b6 d1 e4 97 20 83 d9 ff 5a da ff 2a 1b 42 ca f7 88 82 d7 a4 37 4a Data Ascii: TXCDcOS{}9\umb#p~J0u$>GpMQ,y ZB7JOj/YG_tK ty>IAK)$V ,{e,01a@ms)P.'b.4I=\2Q\uyLk}B_.ioCOUO$2(&C
Nov 25, 2024 15:32:58.857656956 CET	674	IN	Data Raw: 22 26 84 5c 0d b8 49 74 fa 04 02 3f 6a 26 74 4b cd 4d 9f ab bd b2 3b 37 44 ec a6 a6 4d 71 54 80 e5 6b 38 90 60 d9 63 3f 06 22 c7 ab 25 d4 2f ca d7 fd b2 e8 c9 bd ec 41 15 fd 4b 36 e8 cf bf d6 4f a3 72 c1 a8 c2 f7 47 d1 d8 7c 30 b6 f8 23 63 69 46 Data Ascii: "&\It?j&tKM;7DMqTk8`c?"%/AK6OrG\|0#ciF3OK#0"B:tOS:7Npj88Jl-I$Gl/)d\|s$v4ELHD)c=Nn9):vJ1o<f!3!8,Zxi*GE4\|8^
Nov 25, 2024 15:33:00.612700939 CET	493	OUT	GET /track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:01.079857111 CET	594	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Mon, 25 Nov 2024 14:33:00 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Nov 25, 2024 15:33:01.338195086 CET	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Nov 25, 2024 15:33:01.369220972 CET	378	OUT	GET /ls.php?t=67448a9a&token=8046a9ef8675aca4e45d529a18f8a6dc08d1152f HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:01.864599943 CET	856	IN	HTTP/1.1 201 Created Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Content-Type: text/javascript;charset=UTF-8 Date: Mon, 25 Nov 2024 14:33:01 GMT Server: Caddy Server: nginx X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_I2AMA1lYgpTbbSNhlNWc1IhA2qvp68wWuBR8JPD1DZr8/8ldxqTNYsVWxiW0M/SkccFJfhCm62oxDJc+kBJW6Q== Transfer-Encoding: chunked Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Nov 25, 2024 15:33:11.055416107 CET	612	OUT	GET /track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Nov 25, 2024 15:33:11.520622015 CET	594	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Mon, 25 Nov 2024 14:33:11 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: none Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Nov 25, 2024 15:33:14.730288982 CET	486	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Nov 25, 2024 15:33:15.189661980 CET	221	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Mon, 25 Nov 2024 14:33:14 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx
Nov 25, 2024 15:34:00.196599007 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49712	103.224.212.217	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:32:59.024035931 CET	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Nov 25, 2024 15:33:44.036051989 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	185.53.178.30	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:32:59.268479109 CET	330	OUT	GET /scripts/sale_form.js HTTP/1.1 Host: c.parkingcrew.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:00.603411913 CET	1005	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:33:00 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 [TRUNCATED] Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	108.158.71.217	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:32:59.275319099 CET	434	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:00.821633101 CET	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Mon, 25 Nov 2024 11:10:01 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 fc56b8a676000a5893378ee9d2b55f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: uqWCtx8X7K0mKgPauRw_q8_zE3-hYPP9dbZT_K9jpoaeNpkfEZEmAQ== Age: 12179 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Nov 25, 2024 15:33:00.821696043 CET	646	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 00 00 b1 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ttRNS
Nov 25, 2024 15:33:00.821989059 CET	1236	IN	Data Raw: 13 11 09 a3 3d 0c ee f0 4e 44 24 8a f6 50 b8 c3 3b 11 51 90 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b Data Ascii: =ND$P;Q~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;M
Nov 25, 2024 15:33:00.822045088 CET	1236	IN	Data Raw: 67 b3 e0 1e 8d 77 70 ef 8f b7 f7 a8 32 ae a5 a6 c2 3d 0f ed d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 Data Ascii: gwp2=p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwb
Nov 25, 2024 15:33:00.822097063 CET	1236	IN	Data Raw: e2 f0 b8 47 e2 bd 06 ed 56 71 47 77 c2 76 19 b8 c7 e2 bd fe ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 Data Ascii: GVqGwvq{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;
Nov 25, 2024 15:33:00.822132111 CET	1236	IN	Data Raw: 7b 7a da 07 f1 6e 0b 77 e8 20 f9 59 c7 3d 03 ed b5 79 ef 3f 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d Data Ascii: {znw Y=y? SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v
Nov 25, 2024 15:33:00.822210073 CET	1236	IN	Data Raw: 3b ba 13 b6 eb c7 7d 99 f7 ac b4 67 c6 bd c3 fb 37 1e 9a 9d 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f Data Ascii: ;}g75}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm
Nov 25, 2024 15:33:00.822246075 CET	1236	IN	Data Raw: f6 4c bc f7 d1 9e 13 f7 c5 03 ac 49 a2 10 1d 58 94 83 7b 0e de 6b d2 de e9 a9 16 b8 2f 35 69 ec ee dc b4 67 c5 9d 8d 77 a2 10 bd b9 28 0a f7 d4 bc d7 a7 7d 24 ef ae ce 75 54 79 bc 57 d2 9e 19 77 74 27 52 6d 7b 35 ee 29 79 6f 46 fb 08 de 5d 30 da Data Ascii: LIX{k/5igw(}$uTyWwt'Rm{5)yoF]0>;f{FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;
Nov 25, 2024 15:33:00.822279930 CET	776	IN	Data Raw: 49 68 0f ce bb 53 47 fb 30 de 17 b0 9d 08 dd c3 e2 9e 8c f6 c0 bc 3b 85 b4 0f e6 7d 01 db 89 d0 3d 24 ee 49 69 ef d9 76 51 14 ee a9 69 1f c4 fb 02 b6 13 69 ef 4d 41 b8 27 a7 3d 20 ef 4e 29 ed d5 bc 2f 60 3b 11 ba 87 c2 3d 0b ed c1 78 77 6a 69 af Data Ascii: IhSG0;}=$IivQiiMA'= N)/`;=xwji}=hSL{?pgw/`;d=;xwi_{'C]ywi_7pC{KWy;#IEwg+/`;.^O&]"v"tBm
Nov 25, 2024 15:33:00.822314024 CET	1236	IN	Data Raw: 77 67 88 f6 54 b8 f3 b2 2a 51 da be 3a 2d 1c 77 89 cf 35 39 43 b4 27 c3 1d dd 89 52 f6 da b4 7c dc e5 f1 ee 0c d1 9e 0e 77 b6 66 88 8c 6d c9 b4 c7 5d 1a ef ce 10 ed 29 71 e7 3a 13 91 b1 ef f6 f6 b8 cb 1a 19 e9 0c d1 9e 12 77 74 27 b2 66 fb 74 08 Data Ascii: wgT*Q:-w59C'R\|wfm])q:wt'ftwt'2ft.;Q.O]q/qGw]GQ$7(wt'2d{@%wt'c{PD.9CNp3D{b9Iq3D;]FF:C'1VQS
Nov 25, 2024 15:33:00.942806959 CET	507	IN	Data Raw: 54 64 b6 71 67 84 0c 11 c1 bb 35 dc b7 40 3b 11 c1 bb 35 dc b9 b1 44 44 64 0e 77 68 27 22 ea f1 7e da 10 ee d0 4e 44 94 96 77 07 ed 44 44 89 3b 6d 00 f7 d3 d0 4e 44 94 9c f7 c8 b8 33 1d 8c 88 28 07 ef 51 71 e7 c6 12 11 51 1e de 1d b4 13 11 65 6a Data Ascii: Tdqg5@;5DDdwh'"~NDwDD;mND3(QqQejB(2wh'"{!CDscH$E,ND"qv";=!"{9ND$wDDxwND$}Yqv"Ho6(bypgX=qH.^scH6dp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	185.53.178.30	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:00.882735014 CET	290	OUT	GET /scripts/sale_form.js HTTP/1.1 Host: c.parkingcrew.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:02.244445086 CET	1005	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 25 Nov 2024 14:33:02 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 [TRUNCATED] Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49728	108.158.71.217	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:01.211791039 CET	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:02.776070118 CET	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Mon, 25 Nov 2024 11:10:01 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 3a3261cdebd3450de2b4e3d901a1b028.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P2 X-Amz-Cf-Id: d6QAK1iQ1eiURHKS3CNT8EQ6dl-empgF_Miee47TwfAKui-LfsTo1g== Age: 12181
Nov 25, 2024 15:33:02.776258945 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Nov 25, 2024 15:33:02.776278973 CET	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Nov 25, 2024 15:33:02.776293039 CET	448	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Nov 25, 2024 15:33:02.776313066 CET	1236	IN	Data Raw: 4e d6 49 28 dc 85 d1 2e 0f f7 76 bc 83 3b b6 53 b3 b8 ce 14 06 77 71 b4 4b c4 bd 0d ef e0 be 1a d7 52 09 dd 53 e1 2e 90 76 99 b8 fb f3 0e ee d8 4e e8 9e 1a f7 db 7e 7c 42 22 a3 32 71 f7 e5 1d dc af c4 c8 01 aa 1d 97 55 5b e1 7e db 4b 42 11 95 8a Data Ascii: NI(.v;SwqKRS.vN~\|B"2qU[~KB#.v1r(O9C{/^q]i{<Rht;=i?k>ht7Fl6D~jc;]pWOw
Nov 25, 2024 15:33:02.776325941 CET	1236	IN	Data Raw: 50 be 3e 3f 09 ee 03 78 7f 41 1e ed e9 70 6f c0 bb 37 ed 25 e0 ce 75 26 ca d5 ed 93 e0 3e b0 da cf 35 25 a3 3d 25 ee 35 79 6f 41 7b 11 b8 73 24 92 f2 f4 ce 24 b8 b7 e6 7d f6 50 42 70 53 e2 5e 83 f7 56 b4 97 81 3b ba 13 b6 0b c4 bd c3 fb 76 49 b4 Data Ascii: P>?xApo7%u&>5%=%5yoA{s$$}PBpS^V;vI}-i/wS.L{iO9I+daM&hs:qGwvWk~)2q=p_{(K;(U=]^x4>='J{Ys$R$
Nov 25, 2024 15:33:02.776338100 CET	1236	IN	Data Raw: 8b a4 7d 85 f7 1a 07 64 5a e0 de e5 fd d9 63 52 3b fe 85 dd 5c 4b 25 ca 93 85 cb aa 7f 29 95 f6 4e cf 1e 58 6a 88 75 43 dc 5f ff e0 dc f9 37 a4 f2 be f5 b9 b9 93 52 63 ed 13 ad f4 b0 d8 65 3a f7 dc 56 a9 b4 bf 71 fe dc 07 af 47 c4 bd 43 7b 37 99 Data Ascii: }dZcR;\K%)NXjuC_7Rce:VqGC{7o}Y;r"yHkYaV5.yJ{Cx_]6\|n_(wG(.wt'l ho{-_?WWi;].}w*zp@k>
Nov 25, 2024 15:33:02.776350975 CET	1236	IN	Data Raw: 0d f7 7a b4 27 e6 dd 89 a3 bd 0d ef 73 d8 4e 84 ee 89 71 af 4f 7b b7 b3 c6 70 6f 44 bb 3f ef 3a 71 87 02 b2 57 39 b8 6f bd a7 a9 6e 89 78 77 29 fe 87 1a d3 ee cb bb 46 dc b9 96 4a e8 ae 17 f7 ad 5f f7 d1 2d 89 ba ee ae bb c6 ce 0a a4 dd 8f f7 39 Data Ascii: z'sNqO{poD?:qW9onxw)FJ_-9l'G{?sW{>n'}dw#ea;'y?;qxoM{[:qoO{$JU`7]7z7Z=y_K>
Nov 25, 2024 15:33:02.776464939 CET	1236	IN	Data Raw: c3 a2 0e dc 83 f3 3e 16 52 dd 41 b8 07 a5 3d 30 ef b5 68 17 82 fb e2 0f 58 a9 44 cd fa c1 a2 1a dc 83 f2 3e 16 5a dd 4a dc 97 22 34 96 94 76 29 b8 33 8a 80 a8 59 07 16 35 e1 1e 8c f7 b1 18 ea f6 e1 be 14 a9 b1 84 b4 8b c1 9d 8d 77 a2 26 bd b9 a8 Data Ascii: >RA=0hXD>ZJ"4v)3Y5w& :"6vA;:h_E%h;ixJ.:ycIh;J]h*P{$vY;.{;%9T{cSf5y.wt'dxOG{RI8
Nov 25, 2024 15:33:02.776479006 CET	980	IN	Data Raw: 2c 2b 22 4d bd 16 66 e5 3f 31 fd 9e 54 dd 3c 78 77 86 68 7f 7c ea c8 34 ba 13 61 bb 67 47 a6 1e 7f c2 0e ef ce 10 ed 53 c1 70 47 77 a2 f2 6c ef e0 de c9 0c ef ce 10 ed 01 71 9f 9e 66 c5 10 e9 e8 f2 74 50 dc cd f0 ee 2c d0 fe c4 d4 4a 01 71 47 77 Data Ascii: ,+"Mf?1T<xwh\|4agGSpGwlqftP,JqGw"\GHbwg;QYnz?)sfqGwl^z!CD%>;CC3DtT;(=<~vtl;=l%3w;CG"w;CG}z,k}
Nov 25, 2024 15:33:02.976353884 CET	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49731	76.223.26.96	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:01.632143974 CET	453	OUT	GET /track.php?domain=begantotireo.xyz&toggle=browserjs&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:02.927862883 CET	599	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Mon, 25 Nov 2024 14:33:02 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Nov 25, 2024 15:33:11.526386976 CET	572	OUT	GET /track.php?domain=begantotireo.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMjU0NTE3OC41Nzc6ZDM5NmFlM2YxMTYyZWY4NmY4NTQ2NzViYWQ3M2Y4YTg1MjQ4NGE1ZjM3ODljYjE2YWQyMzBhYmNkOWRhNmM4NTo2NzQ0OGE5YThjZTBh HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Nov 25, 2024 15:33:11.979597092 CET	594	IN	HTTP/1.1 200 OK Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Content-Type: text/html; charset=UTF-8 Date: Mon, 25 Nov 2024 14:33:11 GMT Server: Caddy Server: nginx Vary: Accept-Encoding X-Custom-Track: none Transfer-Encoding: chunked Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Nov 25, 2024 15:33:15.193604946 CET	385	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.begantotireo.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=539b2b71a9031660:T=1732545187:RT=1732545187:S=ALNI_MZAhrqgPUczLiF1z5pCPD-zpoNzNg
Nov 25, 2024 15:33:15.668891907 CET	221	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 0 Content-Type: image/x-icon Date: Mon, 25 Nov 2024 14:33:15 GMT Etag: "66e18132-0" Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT Server: Caddy Server: nginx
Nov 25, 2024 15:34:00.680887938 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49764	63.33.29.236	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:11.022429943 CET	426	OUT	GET /sale_form.php?salelink=1&domain_name=begantotireo.xyz HTTP/1.1 Host: www.mydomainbuy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 25, 2024 15:33:12.359276056 CET	392	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 25 Nov 2024 14:33:12 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://www.mydomainbuy.com:443/sale_form.php?salelink=1&domain_name=begantotireo.xyz Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Nov 25, 2024 15:33:57.368460894 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49733	76.223.26.96	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:46.767287970 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49765	63.33.29.236	80	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 25, 2024 15:33:56.040522099 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	103.224.212.217	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:32:56 UTC	693	OUT	GET / HTTP/1.1 Host: begantotireo.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __tad=1732545174.1013120
2024-11-25 14:32:56 UTC	194	IN	HTTP/1.1 302 Found date: Mon, 25 Nov 2024 14:32:56 GMT server: Apache location: http://ww38.begantotireo.xyz/ content-length: 2 content-type: text/html; charset=UTF-8 connection: close
2024-11-25 14:32:56 UTC	2	IN	Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:32:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 14:32:56 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=68435 Date: Mon, 25 Nov 2024 14:32:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:32:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 14:32:58 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=68411 Date: Mon, 25 Nov 2024 14:32:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 14:32:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49718	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:00 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OUef84YKAkac+zB&MD=7DP+Rau7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 14:33:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8eb9971d-17da-4240-9933-a0196c20d88e MS-RequestId: b5eaa627-6587-478e-adc9-0b233cb3f00d MS-CV: F7LOC85VjUC+qEy7.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 14:33:00 GMT Connection: close Content-Length: 24490
2024-11-25 14:33:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 14:33:01 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:01 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:01 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:01 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143301Z-174c587ffdf59vqchC1TEByk6800000006a00000000012er x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:01 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 14:33:02 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49734	142.250.181.68	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:03 UTC	429	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:04 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 152964 Date: Mon, 25 Nov 2024 14:33:03 GMT Expires: Mon, 25 Nov 2024 14:33:03 GMT Cache-Control: private, max-age=3600 ETag: "9116746273498478329" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 14:33:04 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 32 33 37 38 35 33 35 37 31 31 36 33 33 30 33 33 37 33 38 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 35 30 30 2c 22 61 66 Data Ascii: 1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"af
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 Data Ascii: _symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 29 7b 66 6f 72 28 76 Data Ascii: Like");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}function ra(){for(v
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 51 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 57 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 63 67 28 68 2c 67 29 3a 74 68 69 73 2e 49 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 63 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 31 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 74 68 69 73 2e 42 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f Data Ascii: totype.Qf=function(g){var h=void 0;try{h=g.then}catch(k){this.Wc(k);return}typeof h=="function"?this.cg(h,g):this.Id(g)};b.prototype.Wc=function(g){this.Zd(2,g)};b.prototype.Id=function(g){this.Zd(1,g)};b.prototype.Zd=function(g,h){if(this.B!=0)throw Erro
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 42 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 79 61 3d 3d 6e 75 6c 6c 3f 66 2e 73 64 28 6b 29 3a 74 68 69 73 2e 79 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 Data Ascii: b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.jb=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state: "+l.B);}}var l=this;this.ya==null?f.sd(k):this.ya.push(k);thi
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b 29 21 3d 32 7c 7c 6d 2e 67 65 74 28 6c 29 Data Ascii: on f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k)!=2\|\|m.get(l)
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 75 28 5b 5b 68 2c Data Ascii: is[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(u([[h,
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 Data Ascii: turn h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b){a instanceof String&&(a+="");var c=0
2024-11-25 14:33:04 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 Data Ascii: ction(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:04 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:04 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: eed78853-a01e-0070-6be3-3e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143304Z-15b8b599d88vp97chC1TEB5pzw00000005y000000000msy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:04 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e7cf57de-301e-006e-404d-3cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143304Z-15b8b599d885ffrhhC1TEBtuv0000000067g00000000001b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:04 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:04 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2aa1f1ad-b01e-003d-7c43-3cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143304Z-174c587ffdfl22mzhC1TEBk40c000000066000000000gfvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:04 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:04 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 15799d2c-401e-0047-13c9-3e8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143304Z-178bfbc474bpscmfhC1NYCfc2c0000000680000000005f69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:04 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:04 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 6b6b0dda-801e-0083-096a-3cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143304Z-174c587ffdfgcs66hC1TEB69cs00000005w000000000hzzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:06 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143306Z-178bfbc474btvfdfhC1NYCa2en00000007k000000000mdb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:06 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 3cf7f359-901e-005b-4f39-3d2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143306Z-178bfbc474bnwsh4hC1NYC2ubs00000007ng00000000dwv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49747	142.250.181.68	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	476	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:07 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 152955 Date: Mon, 25 Nov 2024 14:33:07 GMT Expires: Mon, 25 Nov 2024 14:33:07 GMT Cache-Control: private, max-age=3600 ETag: "11432285755850597643" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 14:33:07 UTC	672	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 32 33 37 38 35 33 35 37 31 31 36 33 33 30 33 33 37 33 38 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,173
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f Data Ascii: ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbo
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 Data Ascii: "+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d Data Ascii: function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}function ra(){for(var a=Num
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 57 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 63 67 28 68 2c 67 29 3a 74 68 69 73 2e 49 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 63 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 31 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 74 68 69 73 2e 42 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f Data Ascii: f=function(g){var h=void 0;try{h=g.then}catch(k){this.Wc(k);return}typeof h=="function"?this.cg(h,g):this.Id(g)};b.prototype.Wc=function(g){this.Zd(2,g)};b.prototype.Id=function(g){this.Zd(1,g)};b.prototype.Zd=function(g,h){if(this.B!=0)throw Error("Canno
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 42 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 79 61 3d 3d 6e 75 6c 6c 3f 66 2e 73 64 28 6b 29 3a 74 68 69 73 2e 79 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 4c 64 3d 21 30 7d Data Ascii: ype.catch=function(g){return this.then(void 0,g)};b.prototype.jb=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state: "+l.B);}}var l=this;this.ya==null?f.sd(k):this.ya.push(k);this.Ld=!0}
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b 29 21 3d 32 7c 7c 6d 2e 67 65 74 28 6c 29 21 3d 33 29 72 65 74 75 Data Ascii: var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k)!=2\|\|m.get(l)!=3)retu
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 75 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b Data Ascii: ;this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(u([[h,"s"]]));
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d Data Ascii: alue})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b){a instanceof String&&(a+="");var c=0,d=!1,e=
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 Data Ascii: {return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49749	172.217.19.174	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	1734	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.begantotireo.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3NDQ4YTlhOGNkOTJ8fHwxNzMyNTQ1MTc4LjYxMDN8ZjI5MTc4OTViMzBiMzI0NzI5ZjU3YzRkZTZhNjc4NGQ1ODZkYTE3Ynx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDgwNDZhOWVmODY3NWFjYTRlNDVkNTI5YTE4ZjhhNmRjMDhkMTE1MmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2986208149972408&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107%2C49280903%2C72771954&format=r3%7Cs&nocache=741732545183840&num=0&output=afd_ads&domain_name=ww38.begantotireo.xyz&v=3&bsl=8&pac=2&u_his=1&u_tz=-300&dt=1732545183841&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=697661440&rurl=http%3A%2F [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:07 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 25 Nov 2024 14:33:07 GMT Expires: Mon, 25 Nov 2024 14:33:07 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UHWzpVgwdKMVUGm3GnnOyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-25 14:33:07 UTC	583	IN	Data Raw: 33 61 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a22<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e Data Ascii: er-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radius:2px;font-size:12px;lin
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 Data Ascii: wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 Data Ascii: s:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 33 38 2e 62 65 67 61 6e 74 6f 74 69 72 65 6f 2e 78 79 7a 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 45 73 59 6e 56 6a 61 32 56 30 4d 44 67 34 4c 47 4a 31 59 32 74 6c 64 44 41 34 4f 58 78 38 66 48 78 38 66 44 59 33 4e 44 51 34 59 54 6c 68 4f 47 4e 6b 4f 54 4a 38 66 48 77 78 4e 7a 4d 79 4e 54 51 31 4d 54 63 34 4c 6a 59 78 4d 44 4e 38 5a 6a 49 35 Data Ascii: -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://ww38.begantotireo.xyz/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3NDQ4YTlhOGNkOTJ8fHwxNzMyNTQ1MTc4LjYxMDN8ZjI5
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 Data Ascii: r; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleusercontent.c
2024-11-25 14:33:07 UTC	1390	IN	Data Raw: 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 44 67 77 4e 44 5a 68 4f 57 56 6d 4f 44 59 33 4e 57 46 6a 59 54 52 6c 4e 44 56 6b 4e 54 49 35 59 54 45 34 5a 6a 68 68 4e 6d 52 6a 4d 44 68 6b 4d 54 45 31 4d 6d 5a 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 77 4f 56 38 7a 63 47 68 38 4d 48 77 77 66 48 78 38 66 41 25 33 44 25 33 44 26 61 6d 70 3b 71 75 65 72 79 3d 54 69 72 65 2b 53 69 7a 65 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 6e 63 76 44 34 39 6e 33 69 51 4d 56 49 48 61 6b 42 42 30 39 53 7a 42 78 45 6d 38 42 6c 4c 71 70 6a 5f 45 76 32 2d 63 57 4d 61 69 4e 5f 55 68 34 72 53 78 79 45 38 Data Ascii: DF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDgwNDZhOWVmODY3NWFjYTRlNDVkNTI5YTE4ZjhhNmRjMDhkMTE1MmZ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=Tire+Size&afdToken=ChMIncvD49n3iQMVIHakBB09SzBxEm8BlLqpj_Ev2-cWMaiN_Uh4rSxyE8

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:07 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3257c6a6-201e-005d-32b4-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143307Z-178bfbc474bh5zbqhC1NYCkdug00000007k0000000008r6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:07 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:07 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6e49b968-201e-006e-4441-3ebbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143307Z-174c587ffdf7t49mhC1TEB4qbg00000005y000000000htbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:07 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:06 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: ce5ebd39-a01e-0053-183c-3c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143307Z-15b8b599d885v8r9hC1TEB104g000000062g00000000f8x1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:08 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2f8155c7-701e-0098-4401-3f395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143309Z-174c587ffdfcb7qhhC1TEB3x70000000061000000000ravn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:08 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143309Z-174c587ffdfx984chC1TEB676g000000060g00000000h7a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 922c5f4e-601e-005c-577c-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143309Z-174c587ffdfx984chC1TEB676g000000063g000000007qzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:09 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ad60cd0f-c01e-008e-6f6a-3c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143309Z-174c587ffdftv9hphC1TEBm29w00000005yg00000000htm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:09 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143309Z-178bfbc474bp8mkvhC1NYCzqnn00000007ag00000000mz38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49755	172.217.19.174	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:09 UTC	555	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:10 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 152971 Date: Mon, 25 Nov 2024 14:33:10 GMT Expires: Mon, 25 Nov 2024 14:33:10 GMT Cache-Control: private, max-age=3600 ETag: "8106159395069438931" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 14:33:10 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 32 33 37 38 35 33 35 37 31 31 36 33 33 30 33 33 37 33 38 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a Data Ascii: e},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 Data Ascii: "jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 Data Ascii: r ArrayLike");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}function ra(
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 51 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 57 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 63 67 28 68 2c 67 29 3a 74 68 69 73 2e 49 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 63 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 31 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 74 68 69 73 2e 42 21 3d 30 29 74 68 72 Data Ascii: };b.prototype.Qf=function(g){var h=void 0;try{h=g.then}catch(k){this.Wc(k);return}typeof h=="function"?this.cg(h,g):this.Id(g)};b.prototype.Wc=function(g){this.Zd(2,g)};b.prototype.Id=function(g){this.Zd(1,g)};b.prototype.Zd=function(g,h){if(this.B!=0)thr
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 42 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 79 61 3d 3d 6e 75 6c 6c 3f 66 2e 73 64 28 6b 29 3a 74 68 69 73 2e 79 61 2e 70 75 73 68 Data Ascii: urn p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.jb=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state: "+l.B);}}var l=this;this.ya==null?f.sd(k):this.ya.push
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b 29 21 3d 32 7c 7c 6d Data Ascii: }function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k)!=2\|\|m
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 Data Ascii: e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b Data Ascii: n(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b){a instanceof String&&(a+="");
2024-11-25 14:33:10 UTC	1390	IN	Data Raw: 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 Data Ascii: nd",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:11 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: d02e2b11-101e-00a2-2d3a-3c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143311Z-178bfbc474bxkclvhC1NYC69g400000007mg0000000048ye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:11 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ba5d631a-801e-0047-14d1-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143311Z-15b8b599d88s6mj9hC1TEBur3000000005wg00000000bbuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 7e74133f-e01e-003c-0667-3dc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143311Z-15b8b599d88cn5thhC1TEBqxkn00000005v000000000p3qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 3257ccc0-201e-005d-19b5-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143311Z-178bfbc474bfw4gbhC1NYCunf400000007pg000000004gzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:11 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e328efd5-c01e-00a2-56bf-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143311Z-178bfbc474bpscmfhC1NYCfc2c000000065g00000000dbk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:11 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49766	172.217.19.174	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:12 UTC	373	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:13 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153001 Date: Mon, 25 Nov 2024 14:33:13 GMT Expires: Mon, 25 Nov 2024 14:33:13 GMT Cache-Control: private, max-age=3600 ETag: "11429718672905252801" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-25 14:33:13 UTC	672	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 32 33 37 38 35 33 35 37 31 31 36 33 33 30 33 33 37 33 38 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"12378535711633033738",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f Data Ascii: enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 Data Ascii: nction(){return this.je};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 Data Ascii: tring(a)+" is not an iterable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.f
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 51 66 28 67 29 3a 74 68 69 73 2e 49 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 51 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 57 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 63 67 28 68 2c 67 29 3a 74 68 69 73 2e 49 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 63 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 31 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 64 Data Ascii: t:h=!1}h?this.Qf(g):this.Id(g)}};b.prototype.Qf=function(g){var h=void 0;try{h=g.then}catch(k){this.Wc(k);return}typeof h=="function"?this.cg(h,g):this.Id(g)};b.prototype.Wc=function(g){this.Zd(2,g)};b.prototype.Id=function(g){this.Zd(1,g)};b.prototype.Zd
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 3d 74 7d 29 3b 74 68 69 73 2e 6a 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 42 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 Data Ascii: =t});this.jb(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.jb=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state: "+l.B);}}var l=this;thi
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b Data Ascii: {var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 48 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 Data Ascii: :m,index:-1,H:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{v
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 Data Ascii: unction(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b
2024-11-25 14:33:13 UTC	1390	IN	Data Raw: 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});q("Object.entries",function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49741	172.217.19.174	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:13 UTC	884	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=5rtaqbsbo4vc&aqid=o4pEZ8bUDonymLAPgauhgQk&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=697661440&csala=6%7C0%7C2876%7C3286%7C477&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:13 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-57LsyDVJFpDct0ZJDFJREg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 25 Nov 2024 14:33:13 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:13 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143313Z-178bfbc474bpscmfhC1NYCfc2c000000065000000000fax6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:13 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 14f5e79a-001e-0014-2864-3d5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143313Z-15b8b599d88hr8sfhC1TEBbca400000005y000000000chtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:13 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f19b5380-801e-0015-2749-3cf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143313Z-15b8b599d88qw29phC1TEB5zag000000061000000000dbv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:13 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6ea5360a-801e-002a-4904-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143313Z-178bfbc474btrnf9hC1NYCb80g00000007s000000000c5g7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:13 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:14 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 57389be4-e01e-0003-606c-3c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143314Z-174c587ffdfdwxdvhC1TEB1c4n000000060000000000ccu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:14 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49772	52.211.100.182	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:14 UTC	506	OUT	GET /sale_form.php?salelink=1&domain_name=begantotireo.xyz HTTP/1.1 Host: www.mydomainbuy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:14 UTC	158	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx
2024-11-25 14:33:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:15 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:15 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: aaf2b452-f01e-0071-621c-3e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143315Z-178bfbc474bq2pr7hC1NYCkfgg00000007rg00000000bx3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:15 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: ef3fb90e-201e-003c-18e1-3e30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143315Z-174c587ffdf59vqchC1TEByk68000000068000000000921a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:15 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143316Z-15b8b599d88qw29phC1TEB5zag000000061000000000dc11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 876f21bf-101e-007a-0bbf-3e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143316Z-178bfbc474bscnbchC1NYCe7eg00000007mg00000000nmms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:16 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ea8695b1-901e-002a-7283-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143316Z-174c587ffdfgcs66hC1TEB69cs00000005vg00000000n9r9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49778	63.33.29.236	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:16 UTC	396	OUT	GET /sale_form.php?salelink=1&domain_name=begantotireo.xyz HTTP/1.1 Host: www.mydomainbuy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:17 UTC	158	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx
2024-11-25 14:33:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:17 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:18 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143318Z-178bfbc474bscnbchC1NYCe7eg00000007ug000000003auc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:18 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:17 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5532245b-c01e-00ad-0e6f-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143318Z-174c587ffdf59vqchC1TEByk68000000067000000000de3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49781	172.217.19.174	443	5644	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:17 UTC	884	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=wdwh57h0arz8&aqid=o4pEZ8bUDonymLAPgauhgQk&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=697661440&csala=6%7C0%7C2876%7C3286%7C477&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww38.begantotireo.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 14:33:18 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BJlTfB-fbD4GNB140iI3HA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 25 Nov 2024 14:33:18 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:18 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: d6db62af-701e-0097-3243-3db8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143318Z-174c587ffdfcb7qhhC1TEB3x70000000064g00000000dpvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:18 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143318Z-174c587ffdf4zw2thC1TEBu340000000060g00000000ubp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:18 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:18 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 043e45ca-501e-0078-1031-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143318Z-178bfbc474b9xljthC1NYCtw9400000007h0000000009uae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:18 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:20 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e4221271-301e-0051-4239-3d38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143320Z-174c587ffdfl22mzhC1TEBk40c000000069g0000000036q9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:20 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:20 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c2388785-401e-0048-0e03-3e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143320Z-178bfbc474bp8mkvhC1NYCzqnn00000007g000000000588c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:20 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:20 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:20 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143320Z-15b8b599d88wn9hhhC1TEBry0g000000060g00000000ng5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:20 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:20 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 414c800a-401e-0035-7cbf-3e82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143320Z-178bfbc474btrnf9hC1NYCb80g00000007v0000000001u5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:20 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 527e1194-e01e-0071-7e41-3e08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143321Z-15b8b599d889fz52hC1TEB59as00000005yg00000000kpmg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:22 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:22 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 97f3364e-001e-00a2-6ca6-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143322Z-178bfbc474bpnd5vhC1NYC4vr400000007n0000000008rcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:22 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:22 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: eb55dd92-f01e-0020-3d6a-3c956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143322Z-174c587ffdftv9hphC1TEBm29w00000005w000000000tzur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:22 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:22 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 98e24ef8-f01e-0052-0940-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143322Z-15b8b599d88hd9g7hC1TEBp75c00000005y000000000md9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:23 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:22 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:23 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9a08bc20-501e-00a0-39ae-3e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143323Z-178bfbc474bscnbchC1NYCe7eg00000007ng00000000mz0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:23 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:23 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a6b1c0e3-801e-002a-1ea2-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143323Z-178bfbc474b9xljthC1NYCtw9400000007eg00000000gfs2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0aa534f7-c01e-0014-501a-3ea6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143324Z-178bfbc474bmqmgjhC1NYCy16c00000007t0000000000k88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77e83d57-401e-0016-5857-3c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143324Z-15b8b599d882zv28hC1TEBdchn00000005vg00000000k69b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 15dd4eb7-201e-0051-500a-3d7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143325Z-178bfbc474bscnbchC1NYCe7eg00000007sg000000009hkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143325Z-15b8b599d88wn9hhhC1TEBry0g000000060g00000000nge8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: c388be8e-101e-008e-2ebf-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143325Z-178bfbc474bh5zbqhC1NYCkdug00000007h000000000ckq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:26 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6b91e280-c01e-00a2-4f0a-3d2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143326Z-178bfbc474bfw4gbhC1NYCunf400000007k000000000fxys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:26 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ebfff529-c01e-0014-036f-3da6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143327Z-15b8b599d88z9sc7hC1TEBkr4w000000066000000000c6rw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:27 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143327Z-174c587ffdfdwxdvhC1TEB1c4n00000005y000000000kzd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:27 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 482df903-301e-005d-4bb5-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143327Z-178bfbc474bbbqrhhC1NYCvw7400000007v0000000001eb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:27 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 753d71cc-101e-0065-41b6-3e4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143327Z-178bfbc474bvjk8shC1NYC83ns00000007e000000000c9mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:29 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:29 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ca94d1e-301e-0000-0f9c-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143329Z-174c587ffdfgcs66hC1TEB69cs00000005w000000000k22b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:29 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:29 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:29 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 19a81fd9-501e-0078-66bc-3b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143329Z-15b8b599d88l2dpthC1TEBmzr0000000061g00000000abh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:29 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:29 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:29 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7397a655-c01e-000b-4bbf-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143329Z-178bfbc474bbcwv4hC1NYCypys00000007e000000000csq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:29 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:29 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea7a0cbc-701e-001e-589c-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143329Z-178bfbc474bpscmfhC1NYCfc2c000000068g0000000038z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:29 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:30 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143330Z-15b8b599d88hr8sfhC1TEBbca40000000610000000003wbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:30 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:31 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 96754fe9-301e-0052-4f54-3d65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143331Z-15b8b599d88f9wfchC1TEBm2kc000000065000000000f0ck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:31 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 877e641f-101e-007a-18c6-3e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143331Z-178bfbc474bw8bwphC1NYC38b400000007ag00000000kn04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:31 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ecab23c4-c01e-00ad-2963-3ba2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143332Z-178bfbc474bscnbchC1NYCe7eg00000007u00000000056hz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:32 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:32 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 9479b36f-f01e-0020-340e-3e956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143332Z-178bfbc474bpnd5vhC1NYC4vr400000007gg00000000k0wr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:32 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:32 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 376cbe9f-601e-00ab-3b11-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143332Z-178bfbc474bscnbchC1NYCe7eg00000007v0000000001few x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:33 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 93e7400e-201e-0003-07ae-3ef85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143333Z-178bfbc474bv587zhC1NYCny5w00000007hg000000003rca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:33 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:34 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: b3049c5e-001e-0082-330c-3d5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143334Z-178bfbc474bw8bwphC1NYC38b400000007f0000000008dbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:34 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:34 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8d306870-001e-0049-49bf-3e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143334Z-178bfbc474btvfdfhC1NYCa2en00000007r0000000006ygd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:34 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ceab71a5-101e-0017-2bd0-3e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143334Z-178bfbc474bpscmfhC1NYCfc2c000000066000000000bkpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:34 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ee6bf500-501e-000a-4e3b-3e0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143334Z-15b8b599d88tmlzshC1TEB4xpn00000005xg00000000g5as x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:35 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d1af82e8-201e-00aa-6ffc-3d3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143336Z-15b8b599d885v8r9hC1TEB104g00000005zg00000000qhra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:36 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 20b606c1-d01e-0028-12bf-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143336Z-178bfbc474bbbqrhhC1NYCvw7400000007t000000000957x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:36 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:36 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ce292e58-401e-00a3-2e0a-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143336Z-178bfbc474bscnbchC1NYCe7eg00000007u00000000056va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:36 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:36 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 07e1e155-901e-0029-69bf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143336Z-178bfbc474bv587zhC1NYCny5w00000007d000000000httc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:36 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:37 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 23233071-401e-000a-7f02-3f4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143337Z-174c587ffdf59vqchC1TEByk68000000066g00000000ec2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:37 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:38 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:38 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: efe1277d-c01e-008d-7f4b-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143338Z-15b8b599d88z9sc7hC1TEBkr4w000000063000000000n3xg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:38 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:38 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:38 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 512d0a55-c01e-0079-2cc0-3ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143338Z-178bfbc474bv7whqhC1NYC1fg400000007m000000000ca55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:38 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:38 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:38 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 198a258a-e01e-000c-1dbf-3e8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143338Z-178bfbc474bpnd5vhC1NYC4vr400000007mg00000000acgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:39 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:38 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:39 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: def4d052-b01e-0053-1eaf-3ecdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143339Z-178bfbc474b9xljthC1NYCtw9400000007c000000000p1t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:39 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:39 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:39 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4ba44194-501e-0047-0aeb-3ece6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143339Z-15b8b599d8885prmhC1TEBsnkw000000063g00000000k4af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:39 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:40 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:40 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 149a8621-501e-0029-28a6-3ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143340Z-174c587ffdfldtt2hC1TEBwv9c00000005u000000000q9w2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:40 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:40 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97ae142a-001e-00a2-5787-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143340Z-15b8b599d8885prmhC1TEBsnkw000000064000000000gey4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:41 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9c4c3b32-001e-0028-37e2-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143341Z-15b8b599d88g5tp8hC1TEByx6w000000064g000000001mx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143341Z-178bfbc474brk967hC1NYCfu60000000079000000000m7kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49835	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:41 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OUef84YKAkac+zB&MD=7DP+Rau7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 14:33:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0e94b552-cf20-44ec-8dd1-816187a366d0 MS-RequestId: d99e5a4a-e4e3-4117-a3e7-05c8ce014689 MS-CV: gWi2VWeGB0iZxI3v.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 14:33:40 GMT Connection: close Content-Length: 30005
2024-11-25 14:33:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 14:33:41 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:41 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143341Z-178bfbc474bv7whqhC1NYC1fg400000007n0000000009acy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:42 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 8d0ecd0b-301e-0020-617e-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143342Z-174c587ffdf89smkhC1TEB697s000000060000000000u8xw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:42 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e04d5a2d-b01e-003d-70c1-3ed32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143343Z-178bfbc474btrnf9hC1NYCb80g00000007mg00000000qzk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:43 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:43 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6b0db6fe-b01e-0084-64f5-3ed736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143343Z-15b8b599d889gj5whC1TEBfyk000000005tg00000000nv24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:43 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:43 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:43 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 04c26370-f01e-0003-1e65-3d4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143343Z-15b8b599d882hxlwhC1TEBfa5w00000005y000000000e16g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:43 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:43 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 80a20124-101e-0046-4f43-3c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143343Z-15b8b599d882zv28hC1TEBdchn00000005w000000000kfaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:44 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:44 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 5ff5d98c-101e-0079-04fd-3e5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143345Z-15b8b599d8885prmhC1TEBsnkw0000000690000000002v1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:45 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:45 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 11f5d02a-c01e-008d-30bf-3e2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143345Z-174c587ffdfks6tlhC1TEBeza4000000066g0000000054au x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:45 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 45806a8e-701e-003e-807c-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143346Z-174c587ffdfldtt2hC1TEBwv9c00000005sg00000000udy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:45 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 008b0be1-f01e-001f-587c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143346Z-174c587ffdf8lw6dhC1TEBkgs8000000060g00000000kzcu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:46 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:46 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 080d0a10-601e-0050-16b6-3e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143346Z-178bfbc474bw8bwphC1NYC38b400000007d000000000du6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:47 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: a9288e84-901e-0016-0fbf-3eefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143347Z-178bfbc474bxkclvhC1NYC69g400000007mg000000004b41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:47 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:48 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 358685dd-301e-005d-4f7d-3be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143348Z-174c587ffdf8lw6dhC1TEBkgs800000005zg00000000q2c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:48 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:48 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 529557e1-c01e-0079-5045-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143348Z-15b8b599d88tmlzshC1TEB4xpn000000060g000000006rs6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:48 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:48 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 0a9ad79b-401e-002a-79d1-3ec62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143348Z-178bfbc474b9xljthC1NYCtw9400000007e000000000hn09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:48 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:48 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 8f21b959-301e-0096-6e6c-3de71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143348Z-174c587ffdfb74xqhC1TEBhabc00000005zg00000000pzb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:49 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 38659630-901e-008f-15a0-3b67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143349Z-15b8b599d88phfhnhC1TEBr51n000000065000000000e7y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:49 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:50 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 38a59648-401e-00ac-39a0-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143350Z-174c587ffdftv9hphC1TEBm29w00000005z000000000fsm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:50 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143350Z-178bfbc474bwh9gmhC1NYCy3rs00000007rg000000005p3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:50 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:51 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 38badaf1-c01e-00ad-2128-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143351Z-178bfbc474bnwsh4hC1NYC2ubs00000007t00000000004w7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:51 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 719deb7f-801e-008c-11bf-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143351Z-178bfbc474b9xljthC1NYCtw9400000007eg00000000ghmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:51 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:52 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:52 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:52 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143352Z-174c587ffdfb485jhC1TEBmc1s00000005tg00000000r9cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:52 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:52 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:52 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c06a529d-f01e-0085-0e9a-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143352Z-15b8b599d88pxmdghC1TEBux9c000000065000000000f2q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:53 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:52 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 29633705-301e-0033-40e3-3efa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143352Z-15b8b599d886w4hzhC1TEBb4ug0000000660000000004tar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:52 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: da294107-101e-000b-45e2-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143353Z-178bfbc474bq2pr7hC1NYCkfgg00000007n000000000maue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:53 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:53 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 01d403fe-801e-0078-7dbf-3ebac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143353Z-178bfbc474brk967hC1NYCfu60000000079g00000000mpq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:54 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:54 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: a2a0f415-801e-0035-50c6-3e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143354Z-178bfbc474bbbqrhhC1NYCvw7400000007sg00000000appc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:54 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 20b8ead9-d01e-0028-50c0-3e7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143355Z-178bfbc474b9xljthC1NYCtw9400000007gg00000000b7d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:54 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b7389e14-501e-0029-4802-3fd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143355Z-15b8b599d88hd9g7hC1TEBp75c000000061000000000cpe3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:55 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 8b828932-f01e-0020-5c01-3f956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143355Z-174c587ffdfmlsmvhC1TEBvyks00000006800000000093kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:55 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:55 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 2a463278-e01e-001f-3ed1-3e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143355Z-178bfbc474bfw4gbhC1NYCunf400000007fg00000000p323 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:56 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f7275632-901e-00ac-0fb9-3eb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143357Z-178bfbc474bwh9gmhC1NYCy3rs00000007mg00000000h7pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:57 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 1eb9d342-301e-005d-4e03-3de448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143357Z-178bfbc474bq2pr7hC1NYCkfgg00000007v0000000001t1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:57 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b11cdbee-501e-007b-73b7-3e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143357Z-178bfbc474b9fdhphC1NYCac0n00000007n0000000001868 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:57 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:57 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143357Z-178bfbc474bv587zhC1NYCny5w00000007fg00000000ah15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:57 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:58 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:57 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8abb671b-d01e-0049-4b0c-3de7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143357Z-178bfbc474bfw4gbhC1NYCunf400000007k000000000fzv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:58 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:59 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:59 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: ab1afa94-201e-0085-151a-3d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143359Z-178bfbc474bfw4gbhC1NYCunf400000007q0000000002u04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:59 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:59 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:59 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d606dcfe-601e-003e-695e-3b3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143359Z-178bfbc474bfw4gbhC1NYCunf400000007m000000000cyvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:59 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:59 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:59 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: a6ee8c45-701e-0053-78c6-3e3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143359Z-178bfbc474bscnbchC1NYCe7eg00000007q000000000hbeg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:59 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:59 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:33:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:33:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143359Z-174c587ffdftjz9shC1TEBsh9800000005v000000000pycp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:33:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:33:59 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:00 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 15687058-401e-005b-477d-3b9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143400Z-174c587ffdfl22mzhC1TEBk40c000000064000000000qz0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:01 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:01 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143401Z-178bfbc474bq2pr7hC1NYCkfgg00000007ug000000003e6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:01 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:01 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:01 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143401Z-178bfbc474bpscmfhC1NYCfc2c000000062000000000pafd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:01 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:01 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:01 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: eee9d3d7-e01e-0085-48d0-3ec311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143401Z-178bfbc474bnwsh4hC1NYC2ubs00000007p000000000cyt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:02 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:01 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:02 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 6b6acbbe-a01e-0021-3306-3d814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143402Z-178bfbc474bv7whqhC1NYC1fg400000007hg00000000gt4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:02 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:02 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:02 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:02 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 8149a5d6-a01e-001e-117b-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143402Z-174c587ffdfl22mzhC1TEBk40c000000067000000000e8qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:02 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:03 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:03 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c87fa586-301e-0052-7045-3c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143403Z-174c587ffdfp4vpjhC1TEBybqw00000005z000000000qfhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:04 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:03 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:03 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 90e1d0f5-d01e-0065-4fbf-3eb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143403Z-178bfbc474bv7whqhC1NYC1fg400000007pg0000000052bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:04 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:03 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:04 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: f666aca1-b01e-0097-79bf-3e4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143404Z-178bfbc474bvjk8shC1NYC83ns00000007eg00000000b24x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:04 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:04 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:04 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: fe20bd9e-901e-0015-51c1-3eb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143404Z-178bfbc474bpscmfhC1NYCfc2c0000000670000000008fk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:04 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 14:34:04 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 14:34:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 14:34:04 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 627e99eb-a01e-0084-2049-3c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T143404Z-178bfbc474bwh9gmhC1NYCy3rs00000007hg00000000p30y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 14:34:04 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2836, Parent PID: 5400

General

Target ID:	0
Start time:	09:32:44
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5644, Parent PID: 2836

General

Target ID:	2
Start time:	09:32:48
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1968,i,17141759005660411578,10118279808094888985,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5820, Parent PID: 5400

General

Target ID:	3
Start time:	09:32:50
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://begantotireo.xyz"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://begantotireo.xyz

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Windows Analysis Report
http://begantotireo.xyz