Edit tour

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com

Overview

General Information

Sample URL:	https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com
Analysis ID:	1562497
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,3064919927911151291,17021055336630254570,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.53.9:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.53.9:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.96:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.6:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.96:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49908 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: bizcreditservices.sharepoint.com to https://login.microsoftonline.com:443/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=3ca8a919066e5a9e6afb48d03e6a15bf4d372c903dfa6198%2d543a247679329d57074cad955ec109bf35abc7fe7d3bfe2d112dc94c111adec6&redirect%5furi=https%3a%2f%2fbizcreditservices%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=076267a1%2d10ee%2d7000%2d250d%2d02013a6824ec

Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.35.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.35.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.223.35.26
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/Q9GdEwrM4EluDeqdkxuDLfAIPOqj37YeKQhnMLLpUqwM1daWzCqV-m2PmiX-qlE38uw9upro1H6SmOMPQCDrCyXqcuhrFbW-xgk7Nk8JFr3mUKBs90aFqi-L9K_OOOCqYtOM3LmiEikGZ6-umkmL_vNw-NYtuyzqS5z_w50Y3h9GeKK9Uyx2g02xJmaRvrsv-14UNryeLWuaCaIInzDpjXepaoYE4HctSqBQTCT8BSPgj4QHSmoJCCcCWQyk5eChNYyqnRZvznE3JntjDbNzkcpVufzXTAz2iabcRNIUwcEGBBKNygc0v7cKO08xCRX5AAidAuubeURvFbBFZkpS9MPHob6PQSnv1rfNRm9VUyVGkwZNs8QxyTdZr4EdtF4tgauzWn4-p86sw0gYEwglvf2XOl2peNL6UnHhmL9s2Wo8pmC-iN_zxytde66CDJr1mQcfY9BWRqXtequ4C1zBy4UAOnl3ToCDKANcAF9JoK1CRmmpnUg_Coxk2pwKdNHWIDzJ3Cj6Ms_mIAbBUW7ZUP0aiwNF9iMLRd1Br8rZZY-8l0J55NzUrOxlA_vp3Mm_w-mCiUOsJ_SzdZbYfsD1yrnNWrNU6mSrtVisW8hQIUfKk2w2iVOukBGASYGhdoiJjMQvWr73Uutdpzl0LQLm3knODeg2gkaCDtSFoRilhNz5hOQKsqxepDxhokx-HWDV0Z11jgUW5dF-Wo_pqFHCIvGsxYJ3yujMA9cMOC21pOHnmegTSdERNy2n4rdU7JDOObHxpRThp7j6VAcX3SyMasf4nMR3BsNja8ucysMLYp-aLX947XsreJkKaDsH5U43TfwdeYQb65md2hP31Wvik2-cDTdCAS7LSa0wWjwUCfr6EzaWf6q5bDXGbbgvuv-Ac1QxcNoeykkq5Q71vDCvZxKbRxMcYYNfKJgimfEuMNTAoSWFR4YbWMZTRgLkDQ2fgIhxnlAabexfY4EALRSxWaF7FeI7TFQGGfbmP4FopRlqW0o4h89TWpFC4y4HR6hAP4oM2iDkgQzToyxGNOsD4DV3Y4kWTHlOSDYghD1pfqzGTMKcpohW_jIjkn_F2pCiZQbY0Ts5Kj5dYYltHMdZkOAjgOQACxj3XiHxc2PoZIQ7Qe9Ojv2JX0vtZAqumdYH92yFv8mBzy95wsQNNv5kvsYxVXx019V6djF-rYllKKwvp5pekqBhbN9w27aFqHU1SG3SkWpszOZ2ELXlEwdeIGI34a24I4CgqrxZNb68wdRXh40l--CBKipbyc_pjA3rBXfTr40z7oH1ICUm5cbK9TwW-67uVrJAH4-2SGBp7Lf78dvXeZPPJxOd-BphuIhl9TAI7nX11AS2EzHmBkpmREW5WCNcXMSMcvjWOtoC-Jx9kTNU6dhSM2Kujp2cTo5QwZqxQhMwrhR-y9J2MnT9yJ81sBoPeuPxdzKp39SGVhrR5EXlKJdFn7Yc4AVOO5-mMOxlGGbjeu3GX5eqj6hrZQVar3SbUz_Q9mJrCsYSsAFh9n364l5IO5suz42G88XjgNl0dW73GlwQEvh-hDISNfyepRW-ea0JlycBOo1brxm6p6yKUQq96k1Yt230sXm7lef7mEqFeyEZqEuwjUdKoqEsNtV1ueSC0x4TwL9vY_BCEc8RyWM545xRSvvqdPAne3Scja5GN1yaLaMyYMh07V6rh2ErTb0Z3s27wCqZKUZmRZzhKja8af1HZVp3bxJQvg-xadeGl_o531wgQvp_oOoNji1heJFgheubMlbSq20RMylJHjmR47xD4nvdb8CQJZhmurf4cFnHQBRoryyKMyQnFeJu1FtsfMznO3ee0lFr8cjUKGu1LTAdlFtLEeLtogcPTZeKreE9QWo01RNsc0We0Hu-WrtWbiL4puPvnzQLtvCgbIeObwhIRbnp0yNB20yOiWEk91NKVr_Xvg1Pc1T436sjBk6DGh-_fdo4M6EGTI-0CU57Jr0jM4y7iomlRDWYShKwwNO_hcfCCKGXJhDI_KhCRzenkZtZ6cSr2_TYz-vqXO0zfvFqLWnyc-qPpGqnKQLvUdwJPmzl88Vbj9geWZn6hxKjWGTQwH5inWP23A8DLQz-8MGROUpmutVLUWsThNMfSE_TxYg9ZhC-Fg HTTP/1.1Host: url.us.m.mimecastprotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=09ecb35ce3354150af86cf6d748c6dff&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338388&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAW84MGzJS4KsQrJgq1kHpPknubqDi07FdfuyYqf7AsguCg3PuABmB2zg20Wf9bWdzwfLtqb3xzEVFk9tpViptoLw0ZUqjlCt1nYK9Gw2vp/wDrpry+4N4EaSVxOQzcKtQN/gUGPWQu3zcol5WTjPixi2kP18KzqWgI1a8eSPLa0XN2ExvRugO3QGmP65BMHYHe1c07lNpOsmTGOqMzbtNKiqgVZfyZ3Sn1O7evVR9dnOyrDI94c3IIn4xvZGw6OpJd2Kk+77Cl/IVw4WvXrhDpSpObqr7Igi4kh9tfNjEtMWiTYQH1hGTZwGdfsK7cqGcDct5L6SGz+Uzk5gev26gWIQZgAAELiBjCF9uYvkEC8jETideg+wAX5LpgAq4/Fnja1KQtjmrmiqvZU+XeG/0oXU2U8mT+GZQdzdo7+joPMkY7ClUcQyX9Tl4I5qeKCLETx7xujosLn+qJbJM5l3/pn4ocRoHBiG/lhS40iXd+OCf+Ci6nDWs8J8z+gwshH8wt0Cj85l2IcWi+v/qAVQ7Hnnx2sBAJGabMlw86/Fl0U2ZlTEy/ETBX5sf9Raib7DKLxX3HXJY0vaoEmd3fq+VJb+ZfLafYTRMCMOOsS0Q7rDorPjnAeYPR89IUFIr+vsa1dZk87SSej29MtXOCEZWm5czAAZkNysPo7TqVvsPqD2cJ5wsOtAvjvPfi2rq11LiWiqQbjGRBVFBNRB/fLMTkx0hWeYu+Lxcz7a4JjnDd1jsLXj4DajGwLhW3csyDDkYAYq+W8Mcus0Cynu5ys1f52y3P7u2gh+VsUU0UeV4m0Tnf40POoSecTJtGkpGMoa88O8uurmk0oEdJ+r2eZk5FE1jTiOPD1z5iHQt/O3IHMgkb6dzdJfFI6sfwNLAgrvd4yTB+4y5o2uuDc4F3/SgwCZmE/SR2RapBAsjonziqLEMDDZ/NBL9NcB&p=Cache-Control: no-cacheMS-CV: iR5oYBukH0Gc0Bwy.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=27c7ed7ae6864ebeb09bca6edd2fbb7e&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-280815&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: iR5oYBukH0Gc0Bwy.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=e64f51993f0d491fbd0ece74acf9bc89&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338387&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&sc-mode=0&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAZyLU9X1pXePMe4KgBijzYC7Sx7qqII89R8S58dsGTY795VOf0qxLLD4GDQ24LTwtl0FZ95FQ9+zf/tqZz/EAqjIURyAUdCnPPlvjUwBnBfdDbLaITpAGdLppS80wwLo3OMzoOmfBL4CLdD32Wtz7b39bfo13Bu4YdkaO2ukOFdX4IsGeC/vXr4McwGt/gQE8/+QHOdGEXPfK15mjiMG8WlvhzH5UovBbPmFA0cJ2s1D+OiTVufj02TpluoRtPHr0Lkubmh013QtRLlozhrpAqnC1Vd4zyRIIKecXQJU4j9NCFAtecw4jyHdmHR70T/mUms/KcoTGDIm7VJBOi5llJEQZgAAEK0Yuj6bvKcH2UFZkBeQ9ZKwATz0Cgq9cnM9IafV49scEdIyC2aTbKaCoJ7dDk2fKeEsLjfGNvR/T6V0hZatVKUg/AXFOf8mYL7SxXNCCwwc5ZWXM+NgPqdR99SRIhVSiXinHjkiPjvgRr58W6LSGXGIYIt0gLxii54zYu0N+hfUqKt/6MLdNtzudYN4cwCyGdZsQRcYLWbRu8ZdYYFV+KNHs3Dyz7xLc3sesSZK4ai+/2xDxbHw0zzQoSh0CWXm9hfj6o6Nk4XpviWy9+KlqaitOJulJyvtGImH/j9obQkRYjF5tSDF39zABCDzUPsa6NvkYhITWY2YIfpD70gAzQBRnDeXpwhemTQZVA68DZ+7C4mON5byB+XHf2y9nwnjLj+Pq0oJpLuC8ufyNMNPsicyAe81tutd5IvdDHeiMfT2CR5CCAeNzoeXl+kdpHHPGh1wuwRd4rOs9PjyiBXqCoy7B+0+FFXBGC74yAqZ2HdRKQws+PKRs2smYNdP4q5MtXQnZqZRqEtz2v8v+lMBpSNvjsFKX+Fjs3E1ygj4XCgF/Uq9WXIMFnc2OcfKP8pCSMkvrEYLBkxRc48lC6A2LIyTTNcB&p=Cache-Control: no-cacheMS-CV: iR5oYBukH0Gc0Bwy.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /:b:/s/AximClients/EZAtYmCEsOZGtfivHr9tsMgBw1Wx_VRJQLySCr5DYzUrAw HTTP/1.1Host: bizcreditservices.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153204Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=10bbbc931825442da0f22339a581f36c&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338388&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: iR5oYBukH0Gc0Bwy.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153206Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=9675a04e3e6a40e793006edfbd27cdc0&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-280815&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: iR5oYBukH0Gc0Bwy.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sites/AximClients/_layouts/15/Authenticate.aspx?Source=%2F%3Ab%3A%2Fs%2FAximClients%2FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%5FVRJQLySCr5DYzUrAw HTTP/1.1Host: bizcreditservices.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153206Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=46ea8e7e7b43498c978058335cfd3f89&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338387&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&sc-mode=0&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAZyLU9X1pXePMe4KgBijzYC7Sx7qqII89R8S58dsGTY795VOf0qxLLD4GDQ24LTwtl0FZ95FQ9+zf/tqZz/EAqjIURyAUdCnPPlvjUwBnBfdDbLaITpAGdLppS80wwLo3OMzoOmfBL4CLdD32Wtz7b39bfo13Bu4YdkaO2ukOFdX4IsGeC/vXr4McwGt/gQE8/+QHOdGEXPfK15mjiMG8WlvhzH5UovBbPmFA0cJ2s1D+OiTVufj02TpluoRtPHr0Lkubmh013QtRLlozhrpAqnC1Vd4zyRIIKecXQJU4j9NCFAtecw4jyHdmHR70T/mUms/KcoTGDIm7VJBOi5llJEQZgAAEK0Yuj6bvKcH2UFZkBeQ9ZKwATz0Cgq9cnM9IafV49scEdIyC2aTbKaCoJ7dDk2fKeEsLjfGNvR/T6V0hZatVKUg/AXFOf8mYL7SxXNCCwwc5ZWXM+NgPqdR99SRIhVSiXinHjkiPjvgRr58W6LSGXGIYIt0gLxii54zYu0N+hfUqKt/6MLdNtzudYN4cwCyGdZsQRcYLWbRu8ZdYYFV+KNHs3Dyz7xLc3sesSZK4ai+/2xDxbHw0zzQoSh0CWXm9hfj6o6Nk4XpviWy9+KlqaitOJulJyvtGImH/j9obQkRYjF5tSDF39zABCDzUPsa6NvkYhITWY2YIfpD70gAzQBRnDeXpwhemTQZVA68DZ+7C4mON5byB+XHf2y9nwnjLj+Pq0oJpLuC8ufyNMNPsicyAe81tutd5IvdDHeiMfT2CR5CCAeNzoeXl+kdpHHPGh1wuwRd4rOs9PjyiBXqCoy7B+0+FFXBGC74yAqZ2HdRKQws+PKRs2smYNdP4q5MtXQnZqZRqEtz2v8v+lMBpSNvjsFKX+Fjs3E1ygj4XCgF/Uq9WXIMFnc2OcfKP8pCSMkvrEYLBkxRc48lC6A2LIyTTNcB&p=Cache-Control: no-cacheMS-CV: iR5oYBukH0Gc0Bwy.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239360608909_1XWUMGMD2M0J0LDVR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239340418550_1B8YD3DMBL24NYO16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239355322789_1NJJE89Q6EOBYU560&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239360608910_1R4TEUG1LRQY39K7S&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239340418549_1ZU8FEFK0ERHP4923&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fsites%2fAximClients%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F%253Ab%253A%252Fs%252FAximClients%252FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%255FVRJQLySCr5DYzUrAw&Source=cookie HTTP/1.1Host: bizcreditservices.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRiUzQWIlM0ElMkZzJTJGQXhpbUNsaWVudHMlMkZFWkF0WW1DRXNPWkd0Zml2SHI5dHNNZ0J3MVd4JTVGVlJKUUx5U0NyNURZelVyQXc=
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vECD5cAxcUsO1K7&MD=WHsEyYh2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239355322803_1JLJ9TG11GYY1CXIR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239339388242_1QZCW7SLJ2W1SQ00B&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239370639703_1XZVEAKL3PD7EZGL4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239370639702_1LY06F7YB2ZF9D3G5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239339388243_1PE95YU5XQVT2G1QH&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153215Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=7ef301432d4c41e7ae26c32d9731847c&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-88000045&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAZyLU9X1pXePMe4KgBijzYC7Sx7qqII89R8S58dsGTY795VOf0qxLLD4GDQ24LTwtl0FZ95FQ9+zf/tqZz/EAqjIURyAUdCnPPlvjUwBnBfdDbLaITpAGdLppS80wwLo3OMzoOmfBL4CLdD32Wtz7b39bfo13Bu4YdkaO2ukOFdX4IsGeC/vXr4McwGt/gQE8/+QHOdGEXPfK15mjiMG8WlvhzH5UovBbPmFA0cJ2s1D+OiTVufj02TpluoRtPHr0Lkubmh013QtRLlozhrpAqnC1Vd4zyRIIKecXQJU4j9NCFAtecw4jyHdmHR70T/mUms/KcoTGDIm7VJBOi5llJEQZgAAEK0Yuj6bvKcH2UFZkBeQ9ZKwATz0Cgq9cnM9IafV49scEdIyC2aTbKaCoJ7dDk2fKeEsLjfGNvR/T6V0hZatVKUg/AXFOf8mYL7SxXNCCwwc5ZWXM+NgPqdR99SRIhVSiXinHjkiPjvgRr58W6LSGXGIYIt0gLxii54zYu0N+hfUqKt/6MLdNtzudYN4cwCyGdZsQRcYLWbRu8ZdYYFV+KNHs3Dyz7xLc3sesSZK4ai+/2xDxbHw0zzQoSh0CWXm9hfj6o6Nk4XpviWy9+KlqaitOJulJyvtGImH/j9obQkRYjF5tSDF39zABCDzUPsa6NvkYhITWY2YIfpD70gAzQBRnDeXpwhemTQZVA68DZ+7C4mON5byB+XHf2y9nwnjLj+Pq0oJpLuC8ufyNMNPsicyAe81tutd5IvdDHeiMfT2CR5CCAeNzoeXl+kdpHHPGh1wuwRd4rOs9PjyiBXqCoy7B+0+FFXBGC74yAqZ2HdRKQws+PKRs2smYNdP4q5MtXQnZqZRqEtz2v8v+lMBpSNvjsFKX+Fjs3E1ygj4XCgF/Uq9WXIMFnc2OcfKP8pCSMkvrEYLBkxRc48lC6A2LIyTTNcB&p=Cache-Control: no-cacheMS-CV: z56ILO4WqECRd1ef.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239360265014_1I9L6MC65FHDFQ9Z7&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239360265013_1UVY69FM05I7V26BP&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8eoM1ZBIrw5KepusKyHuQHTVUCUz-fHYR9M961VgdGPR24O80pXgwkqe8VdaeV69Xo9HVGrIeVjh7pd6Apj9DtZLv-dRyFLrDAbYwDvyItE1Foz8fGeDSnVvH9FtAgh6_BrsVjZFXD7aR7CFTKflLnlCYRQBikVW_i9FtrXYjuM9Mx29J%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZmZyZWUtb2ZmaWNlLW9ubGluZS1mb3ItdGhlLXdlYiUzZm9jaWQlM2RjbW01enF4NmxxMA%26rlid%3De072a8c7ed2610df4965cf83755ee7ea&TIME=20241125T153216Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /aes/c.gif?RG=cd0f16605eb242e0a739087450c44e19&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20241125T153217Z&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: www.bing.comConnection: Keep-AliveCookie: MUID=01E3A718127C6A1A1B89B25A13556BA1
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8eoM1ZBIrw5KepusKyHuQHTVUCUz-fHYR9M961VgdGPR24O80pXgwkqe8VdaeV69Xo9HVGrIeVjh7pd6Apj9DtZLv-dRyFLrDAbYwDvyItE1Foz8fGeDSnVvH9FtAgh6_BrsVjZFXD7aR7CFTKflLnlCYRQBikVW_i9FtrXYjuM9Mx29J%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZmZyZWUtb2ZmaWNlLW9ubGluZS1mb3ItdGhlLXdlYiUzZm9jaWQlM2RjbW01enF4NmxxMA%26rlid%3De072a8c7ed2610df4965cf83755ee7ea&TIME=20241125T153217Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-AliveCookie: MUID=01E3A718127C6A1A1B89B25A13556BA1; _EDGE_S=SID=330872B186BD62A407D667F387B463BF; MR=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vECD5cAxcUsO1K7&MD=WHsEyYh2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153250Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=dbdc5f8c2dc0408391189874abf231f7&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338389&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: m6874vTGAU63ISoH.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=310091&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153250Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=305d35e7dbdd4154bfdd718741cea5ca&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-310091&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=0 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: m6874vTGAU63ISoH.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bizcreditservices.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4831Host: login.live.com

Source: chromecache_207.4.dr, chromecache_209.4.dr	String found in binary or memory: http://feross.org
Source: chromecache_193.4.dr, chromecache_213.4.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_193.4.dr, chromecache_213.4.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_193.4.dr, chromecache_201.4.dr, chromecache_213.4.dr, chromecache_200.4.dr, chromecache_207.4.dr, chromecache_209.4.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_189.4.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_189.4.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.53.9:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.53.9:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.96:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.10:443 -> 192.168.2.6:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.96:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.223.35.26:443 -> 192.168.2.6:49908 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/39@16/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,3064919927911151291,17021055336630254570,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,3064919927911151291,17021055336630254570,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://bizcreditservices.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fAximClients%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F%253Ab%253A%252Fs%252FAximClients%252FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%255FVRJQLySCr5DYzUrAw&Source=cookie	0%	Avira URL Cloud	safe
https://bizcreditservices.sharepoint.com/sites/AximClients/_layouts/15/Authenticate.aspx?Source=%2F%3Ab%3A%2Fs%2FAximClients%2FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%5FVRJQLySCr5DYzUrAw	0%	Avira URL Cloud	safe
https://bizcreditservices.sharepoint.com/:b:/s/AximClients/EZAtYmCEsOZGtfivHr9tsMgBw1Wx_VRJQLySCr5DYzUrAw	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	high
url.us.m.mimecastprotect.com	207.211.31.106	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	172.217.21.36	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
bizcreditservices.sharepoint.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239360608909_1XWUMGMD2M0J0LDVR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239355322803_1JLJ9TG11GYY1CXIR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://bizcreditservices.sharepoint.com/:b:/s/AximClients/EZAtYmCEsOZGtfivHr9tsMgBw1Wx_VRJQLySCr5DYzUrAw	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239339388242_1QZCW7SLJ2W1SQ00B&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false		high
https://bizcreditservices.sharepoint.com/sites/AximClients/_layouts/15/Authenticate.aspx?Source=%2F%3Ab%3A%2Fs%2FAximClients%2FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%5FVRJQLySCr5DYzUrAw	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239360608910_1R4TEUG1LRQY39K7S&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418549_1ZU8FEFK0ERHP4923&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239360265013_1UVY69FM05I7V26BP&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239355322789_1NJJE89Q6EOBYU560&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://bizcreditservices.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fAximClients%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F%253Ab%253A%252Fs%252FAximClients%252FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%255FVRJQLySCr5DYzUrAw&Source=cookie	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239339388243_1PE95YU5XQVT2G1QH&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false		high
https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false		high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239360265014_1I9L6MC65FHDFQ9Z7&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239370639702_1LY06F7YB2ZF9D3G5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false		high
https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec&sso_reload=true	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239340418550_1B8YD3DMBL24NYO16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239370639703_1XZVEAKL3PD7EZGL4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_193.4.dr, chromecache_213.4.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_193.4.dr, chromecache_201.4.dr, chromecache_213.4.dr, chromecache_200.4.dr, chromecache_207.4.dr, chromecache_209.4.dr	false	high
https://login.windows-ppe.net	chromecache_189.4.dr	false	high
https://login.microsoftonline.com	chromecache_189.4.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_193.4.dr, chromecache_213.4.dr	false	high
http://feross.org	chromecache_207.4.dr, chromecache_209.4.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
207.211.31.106	url.us.m.mimecastprotect.com	United States	14135	NAVISITE-EAST-2US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562497
Start date and time:	2024-11-25 16:30:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/39@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.19.238, 74.125.205.84, 34.104.35.123, 40.126.53.17, 40.126.53.13, 20.190.181.0, 40.126.53.18, 20.190.181.6, 40.126.53.7, 20.190.181.5, 40.126.53.10, 2.16.149.9, 2.16.149.13, 20.190.177.148, 20.190.177.20, 20.190.177.84, 20.190.147.10, 20.190.147.7, 20.190.147.0, 20.190.147.11, 20.190.147.12, 142.250.181.106, 142.250.181.138, 172.217.21.42, 172.217.17.74, 172.217.19.234, 172.217.17.42, 216.58.208.234, 172.217.19.202, 142.250.181.74, 199.232.214.172, 20.190.177.19, 20.190.147.1, 20.190.177.146, 20.190.177.82, 20.190.147.3, 20.190.147.5, 172.217.17.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, tse1.mm.bing.net, clientservices.googleapis.com, g.bing.com, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, arc.msn.com, 193319-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net, clients2.google.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, www.bing.com, www.tm.ak.prd.aadg.trafficmanager.net, client.wns.windows.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmana
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com

Input	Output
URL: https://url.us.m.mimecastprotect.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://url.us.m.mimecastprotect.com
URL: https://login.microsoftonline.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://login.microsoftonline.com
URL: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "d68561@qbyj.cc" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username.", "prominent_button_name": "Next", "text_input_field_labels": [ "d68561@qbyj.co" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.microsoftonline.com/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113378
Entropy (8bit):	5.285066693137765
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VUW3:xkXhp6VU0
MD5:	9C837C2B6C9C441656C3C64BE6FC6401
SHA1:	D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3
SHA-256:	68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93
SHA-512:	AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449972
Entropy (8bit):	5.448633694424365
Encrypted:	false
SSDEEP:	6144:07PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44y:07DBZkp6umhpsUSuZ
MD5:	87A4DD68AE9C7ECAE0D7BE70E3B69108
SHA1:	86318331A5FAAE3B2430A9F8137CC817741ACE96
SHA-256:	0030E7479CDC07327AA070FE746F5B2ECD366CE3A6EE1E9E83547DC7703A59E4
SHA-512:	F715E26312AF1CE8F1E5396CE61CBB5CCF227ED364F09D06FA59CEAA115C28DD77170750F0FF3C2E250F836AB6F562D4EFB3A8F19B91D72A0F34865BEB0FD012
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	98298
Entropy (8bit):	5.449326149649322
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAE:vgDTMnWRwvDIgb0q7Eb9E
MD5:	9CF678DA87EB7D856CCF3FB1E3F41AD3
SHA1:	E77A7998D013049F3649B3B3723B38B28EDBF146
SHA-256:	EFD3681E53B51FB0CB118C23D9CF01CD8FCBE50429DC5D6949DA7A26A32F5471
SHA-512:	44A615EB5CF73E84BE9617F1605230CE6FBBA5A83EFAC3B1C1BD06474A3CF1B04A0E0C4EE2324ECA06FDF30144132218C54EC3E334858598C6C15670CE08D8FB
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32016)
Category:	downloaded
Size (bytes):	57510
Entropy (8bit):	5.3728935008680745
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtv+ixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtv+iJig/Ml
MD5:	23C7FEEF919F9374C1B26F019804CDA8
SHA1:	3E22BA24CFD4F5A1C4D189AAADB1A82A867377C0
SHA-256:	993A5748DB7B6BC125F88788845A7599234130BCE2858B528071035488CB886D
SHA-512:	93D4D19CA4BACFC0AD64690E2426D573D47991DAF772D178D5C477369675539274A5E97C666A97A49AD0EC82E566EF4B71E967E7D7FFC575FBD2171E06791276
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32016)
Category:	dropped
Size (bytes):	57510
Entropy (8bit):	5.3728935008680745
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtv+ixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtv+iJig/Ml
MD5:	23C7FEEF919F9374C1B26F019804CDA8
SHA1:	3E22BA24CFD4F5A1C4D189AAADB1A82A867377C0
SHA-256:	993A5748DB7B6BC125F88788845A7599234130BCE2858B528071035488CB886D
SHA-512:	93D4D19CA4BACFC0AD64690E2426D573D47991DAF772D178D5C477369675539274A5E97C666A97A49AD0EC82E566EF4B71E967E7D7FFC575FBD2171E06791276
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449972
Entropy (8bit):	5.448633694424365
Encrypted:	false
SSDEEP:	6144:07PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44y:07DBZkp6umhpsUSuZ
MD5:	87A4DD68AE9C7ECAE0D7BE70E3B69108
SHA1:	86318331A5FAAE3B2430A9F8137CC817741ACE96
SHA-256:	0030E7479CDC07327AA070FE746F5B2ECD366CE3A6EE1E9E83547DC7703A59E4
SHA-512:	F715E26312AF1CE8F1E5396CE61CBB5CCF227ED364F09D06FA59CEAA115C28DD77170750F0FF3C2E250F836AB6F562D4EFB3A8F19B91D72A0F34865BEB0FD012
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 16:31:49.494404078 CET	443	49713	20.198.119.143	192.168.2.6
Nov 25, 2024 16:31:49.545156002 CET	49713	443	192.168.2.6	20.198.119.143
Nov 25, 2024 16:31:49.695460081 CET	443	49713	20.198.119.143	192.168.2.6
Nov 25, 2024 16:31:49.696610928 CET	49713	443	192.168.2.6	20.198.119.143
Nov 25, 2024 16:31:49.998270988 CET	49713	443	192.168.2.6	20.198.119.143
Nov 25, 2024 16:31:50.072132111 CET	443	49713	20.198.119.143	192.168.2.6
Nov 25, 2024 16:31:50.118242025 CET	443	49713	20.198.119.143	192.168.2.6
Nov 25, 2024 16:31:50.504709005 CET	443	49713	20.198.119.143	192.168.2.6
Nov 25, 2024 16:31:50.560811996 CET	49713	443	192.168.2.6	20.198.119.143
Nov 25, 2024 16:31:52.404618025 CET	49673	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:31:52.404620886 CET	49674	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:31:52.685794115 CET	49672	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:31:53.268280029 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:53.268331051 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:53.268439054 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:53.269134045 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:53.269149065 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:56.065937042 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:56.066091061 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:56.542124033 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:56.542149067 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:56.542669058 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:56.567217112 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:56.567503929 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:56.567511082 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:56.567689896 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:56.615341902 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:57.253351927 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:57.253443956 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:31:57.253547907 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:57.297821045 CET	49714	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:31:57.297847986 CET	443	49714	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:00.007217884 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:00.007258892 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:00.007337093 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:00.011142015 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:00.011157990 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:01.319782019 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:01.319818974 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:01.319977045 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:01.320815086 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:01.320828915 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:01.606861115 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.606923103 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.607140064 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.607178926 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.607306957 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.607465982 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.607476950 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.616836071 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.616847992 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.616952896 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.617330074 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:01.617337942 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.727180958 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.727252960 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.727304935 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.727372885 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.727401972 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:01.741377115 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:01.741462946 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:01.752914906 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:01.752928972 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:01.753209114 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:01.764249086 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:01.807353020 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.063132048 CET	49674	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:32:02.098552942 CET	49673	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:32:02.159410000 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:02.159435034 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:02.159508944 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:02.160574913 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:02.160613060 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:02.160804987 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:02.161803961 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:02.161817074 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:02.162055016 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:02.162070990 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:02.222126007 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.222172976 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.222199917 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.222363949 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.222378969 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.222426891 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.222974062 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.223098993 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.224457979 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:02.227368116 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.228729010 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.228856087 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.228907108 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:02.237210989 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.237266064 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.237358093 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:02.245671034 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.245685101 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.245778084 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:02.254050970 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.254062891 CET	443	49712	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:02.254193068 CET	49712	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:02.369231939 CET	49672	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:32:02.408546925 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.408575058 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.408685923 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.408699036 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.408751965 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.450190067 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.450211048 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.450304985 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.450315952 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.450380087 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.611463070 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.611486912 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.611553907 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.611568928 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.611598969 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.611800909 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.641330957 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.641355038 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.641432047 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.641453028 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.641701937 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.662122965 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.662144899 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.662264109 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.662272930 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.662317038 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.680083990 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.680105925 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.680186033 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.680195093 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.680298090 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.800751925 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.800775051 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.800932884 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.800947905 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.801058054 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.819437981 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.819457054 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.819559097 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.819570065 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.819643974 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.837269068 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.837285042 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.837351084 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.837359905 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.837475061 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.855144978 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.855159998 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.855268002 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.855282068 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.855334044 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.867990017 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.868046999 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:02.868098974 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.868488073 CET	49715	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:02.868501902 CET	443	49715	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.067578077 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.067622900 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.067711115 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.068912983 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.068922043 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.069015026 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.070339918 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.070382118 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.070442915 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.070744038 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.070756912 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.076719046 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.076731920 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.076788902 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.077116013 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.077126980 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.077357054 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.077368021 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.077770948 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.077781916 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.080364943 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.080384970 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.080466032 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.080864906 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:03.080878019 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:03.571810961 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:03.571835995 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:03.571912050 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:03.577533007 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:03.577549934 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:03.656883001 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.657145023 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.657155037 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.658186913 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.658240080 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.659032106 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.659434080 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.659441948 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.659634113 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.659713030 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.659812927 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.659821033 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.660998106 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.661118031 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.662024975 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.662106991 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.748805046 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.748814106 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:03.794085026 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.874036074 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:03.967329979 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.967436075 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.985260010 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.985368013 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.987968922 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.987978935 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.988106966 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.988121033 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.988233089 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.988446951 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.988852978 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.988874912 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.988923073 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:03.989356041 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.989413023 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:03.989428043 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.066814899 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.066903114 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.069885969 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.069895029 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.070664883 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.072962999 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.073112965 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.073121071 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.073597908 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.115331888 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.249696970 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.249773979 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:04.249785900 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.249803066 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.249857903 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:04.251735926 CET	49724	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:04.251770020 CET	443	49724	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.252798080 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:04.252856016 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.487407923 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:04.487437010 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:04.487554073 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:04.487951994 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:04.487965107 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:04.620738029 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.620928049 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.621022940 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.628467083 CET	49721	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:04.628489971 CET	443	49721	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:04.651495934 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.651598930 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.651712894 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:04.737476110 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.737502098 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.737543106 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.737622023 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.737627029 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.737684011 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.739428997 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.739450932 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.739491940 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.739540100 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.739554882 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.739567995 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.746160984 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.746469975 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.785134077 CET	443	49709	173.222.162.64	192.168.2.6
Nov 25, 2024 16:32:04.789143085 CET	49709	443	192.168.2.6	173.222.162.64
Nov 25, 2024 16:32:04.864787102 CET	49725	443	192.168.2.6	207.211.31.106
Nov 25, 2024 16:32:04.864823103 CET	443	49725	207.211.31.106	192.168.2.6
Nov 25, 2024 16:32:04.877870083 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.877870083 CET	49723	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.877896070 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.877911091 CET	443	49723	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.879484892 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.879508972 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.879527092 CET	49722	443	192.168.2.6	40.126.53.9
Nov 25, 2024 16:32:04.879533052 CET	443	49722	40.126.53.9	192.168.2.6
Nov 25, 2024 16:32:04.933855057 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:04.933890104 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:04.934051991 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:04.935060024 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:04.935072899 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:04.939347029 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:04.939392090 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:04.939477921 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:04.941133976 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:04.941154957 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:05.115829945 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.115895033 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.116691113 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.116722107 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.117301941 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.117307901 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.117350101 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.117384911 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.117836952 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.117849112 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.206901073 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.207061052 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.207498074 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.207540989 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.207638979 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.207652092 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.208295107 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.208300114 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.208386898 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.208390951 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.218851089 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.219290972 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.219326019 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.219716072 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.219724894 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.389497995 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:05.389627934 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:05.483968019 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:05.483993053 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:05.484344006 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:05.484401941 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:05.491679907 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:05.491718054 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:05.557349920 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.557374954 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.557445049 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.557471991 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.557531118 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.557856083 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.557861090 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.557956934 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.558043957 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.558073997 CET	443	49727	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.558235884 CET	49727	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.564537048 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.564572096 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.564799070 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.564799070 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.564835072 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.582284927 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.582431078 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.582503080 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.582525015 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.582838058 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.582858086 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.582870007 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.583024979 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.583055019 CET	443	49731	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.583103895 CET	49731	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.585273027 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.585315943 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.585488081 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.585624933 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.585639954 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.651133060 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.651189089 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.651379108 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.651484966 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.651501894 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.651511908 CET	49730	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.651523113 CET	443	49730	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.655992031 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.656027079 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.656090975 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.656284094 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.656296968 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.657612085 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.657634974 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.657702923 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.657715082 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.657758951 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.657850981 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.657850981 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.657856941 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.658025026 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.658056021 CET	443	49728	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.658102036 CET	49728	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.660475969 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.660506964 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.660742044 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.660864115 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.660877943 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.664298058 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.666726112 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.666834116 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.666834116 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.666862965 CET	49729	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.666877031 CET	443	49729	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.669703007 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.669734001 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.669924974 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.670094013 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:05.670109034 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:05.760593891 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:05.760705948 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:05.760802031 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:05.762909889 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:05.762923956 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:05.829350948 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:05.829391956 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:05.829467058 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:05.829804897 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:05.829821110 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:06.017819881 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.017838955 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.017884016 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.017894030 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.017906904 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.017909050 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.017956018 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.020277977 CET	49733	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.020288944 CET	443	49733	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.192562103 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:06.192913055 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:06.192925930 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:06.193978071 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:06.194040060 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:06.195290089 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:06.195369005 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:06.249763966 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:06.249778986 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:06.297163010 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:06.337914944 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.337949991 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.338018894 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.338238001 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.338251114 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.675705910 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.675791979 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.679569006 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.679579973 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.679862022 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.679868937 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.679975986 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.680042028 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.681379080 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.681452036 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.683891058 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.683912992 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.684093952 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:06.684108973 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.684159040 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:06.684216022 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.117026091 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.117106915 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.119488955 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.119493961 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.119901896 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.165658951 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.201510906 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.201565027 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.201594114 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.201602936 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.201636076 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.201672077 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.201675892 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.201702118 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.201733112 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.201755047 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.202330112 CET	49735	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.202343941 CET	443	49735	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.207340956 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.299640894 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.299666882 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.299683094 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.299741983 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.299783945 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.299793959 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.299840927 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.309771061 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.310538054 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.310564995 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.311142921 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.311150074 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.404741049 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.406116009 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.406131983 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.406975031 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.406980991 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.428061008 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.428111076 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.428216934 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.428634882 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.428647041 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.440648079 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.441442966 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.441492081 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.442257881 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.442265987 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.443847895 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.444371939 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.444399118 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.444979906 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.444997072 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.459043026 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.459649086 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.459669113 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.460128069 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.460133076 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.462136984 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.462227106 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.462236881 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.462285995 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.462385893 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.462399006 CET	443	49736	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:07.462410927 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.462445974 CET	49736	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:07.481618881 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:07.482006073 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:07.482023001 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:07.483032942 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:07.483108044 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:07.486399889 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:07.486464977 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:07.487276077 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:07.487283945 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:07.543855906 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:07.612484932 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.612566948 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.612624884 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.612741947 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.612756968 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.612776995 CET	49742	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.612782001 CET	443	49742	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.647324085 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.647365093 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.647453070 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.647887945 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:07.647902966 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:07.749310017 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.749485016 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.749541998 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.749861956 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.749881983 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.749895096 CET	49738	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.749902010 CET	443	49738	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.753500938 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.753531933 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.753633022 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.753918886 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.753933907 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.845115900 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.845190048 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.845252037 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.845510960 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.845526934 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.845539093 CET	49741	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.845545053 CET	443	49741	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.848660946 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.848687887 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.848752975 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.848900080 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.848912954 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.892411947 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.892566919 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.892787933 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.892877102 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.892891884 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.892898083 CET	49739	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.892904043 CET	443	49739	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.896502018 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.896543026 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.896610022 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.896754026 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.896770954 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.909744024 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.909802914 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.909899950 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.910054922 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.910068989 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.910082102 CET	49740	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.910093069 CET	443	49740	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.912712097 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.912735939 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.912852049 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.912971020 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.912982941 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.975971937 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.976053953 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.976136923 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.994023085 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.994040012 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:07.994052887 CET	49737	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:07.994060040 CET	443	49737	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:08.029146910 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:08.029190063 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:08.029334068 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:08.029905081 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:08.029918909 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:08.132428885 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.132536888 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.136023998 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.136034012 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.136699915 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.136708021 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.267771006 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:08.268038988 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:08.268285990 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:08.334290028 CET	49743	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:08.334325075 CET	443	49743	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:08.345897913 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:08.345935106 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:08.346163034 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:08.346654892 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:08.346669912 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:08.408655882 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.408696890 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.408783913 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.408999920 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.409015894 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.645693064 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.645746946 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.645770073 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.645804882 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.645864010 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.645865917 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.646123886 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.646143913 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.646285057 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.646661997 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.646698952 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.646897078 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.647345066 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.647355080 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.647413015 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.651103973 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.651119947 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.652014971 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.652015924 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.652034998 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.652038097 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.652132034 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.652151108 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.652472973 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:08.652486086 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:08.682147026 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.682171106 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.682226896 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.682260990 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.682279110 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:08.682280064 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.682321072 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.682759047 CET	49744	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:08.682775021 CET	443	49744	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.075062037 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.075136900 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:09.079907894 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:09.079919100 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.080180883 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.081280947 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:09.123337030 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.225445032 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.225532055 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.226176023 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.226182938 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.226574898 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.226583004 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.559148073 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.559921980 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.559954882 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.560528040 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.560538054 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.582274914 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.582866907 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.582890034 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.583554029 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.583559990 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.588804007 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.588884115 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.588947058 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:09.589848042 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:09.589895010 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.589927912 CET	49746	443	192.168.2.6	2.18.109.164
Nov 25, 2024 16:32:09.589946032 CET	443	49746	2.18.109.164	192.168.2.6
Nov 25, 2024 16:32:09.629923105 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.629951954 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.629996061 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.630043983 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.630074024 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.630095959 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.630109072 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.630129099 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.630155087 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.630177975 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.630656004 CET	49745	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:09.630682945 CET	443	49745	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:09.749631882 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.750376940 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.750401020 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.750844002 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.750850916 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.759964943 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.760572910 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.760595083 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.761017084 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.761023998 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.844881058 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.845392942 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.845428944 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.846434116 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:09.846451998 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:09.989059925 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:09.993108034 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:09.993135929 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:09.993626118 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:09.994076014 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:09.994164944 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:09.994223118 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.008927107 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.008992910 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.009162903 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.009320021 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.009336948 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.009377003 CET	49747	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.009383917 CET	443	49747	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.013827085 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.013890982 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.013973951 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.014172077 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.014188051 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.017702103 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.017925024 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.018074989 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.018105030 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.018124104 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.018136978 CET	49748	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.018146038 CET	443	49748	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.020613909 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.020656109 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.020910025 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.021050930 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.021069050 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.035352945 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:10.049042940 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.206698895 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.206769943 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.206907034 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.207097054 CET	49749	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.207122087 CET	443	49749	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.210345984 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.210386992 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.210458994 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.210649014 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.210664988 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.216876984 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.216947079 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.217008114 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.217202902 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.217202902 CET	49750	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.217221022 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.217230082 CET	443	49750	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.219068050 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.219194889 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:10.219599009 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:10.219604969 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.219877958 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.219904900 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.219983101 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.220104933 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.220118046 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.220297098 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:10.220305920 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.240955114 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.240969896 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.241044998 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.241103888 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.288275003 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.288355112 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.291071892 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.291156054 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.292998075 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.293160915 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.307137966 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.307159901 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.307486057 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.307493925 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.307645082 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.307671070 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.307940006 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.307986975 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.308126926 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.308258057 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.308677912 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.313421011 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.313441038 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.313755989 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.313833952 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.316613913 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.316636086 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.316869020 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.316884041 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.316925049 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.316973925 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.319417000 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.319437981 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.319735050 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.319778919 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.319792032 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.320214987 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.340328932 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.340501070 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.340574980 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.351355076 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.358849049 CET	49751	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.358863115 CET	443	49751	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.363342047 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.363347054 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.379534006 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.379575968 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.379813910 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.380072117 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:10.380093098 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:10.679236889 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:10.679640055 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:10.679840088 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.681022882 CET	49752	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.681041956 CET	443	49752	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:10.685822010 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.685868025 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:10.686002970 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.686212063 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:10.686228037 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:10.728454113 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.728517056 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.728564978 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.728600025 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.728615999 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.728666067 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.728744030 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.755841017 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.755894899 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.755937099 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.755971909 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.755987883 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.756020069 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.756052971 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.823523045 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.823548079 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.823563099 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.823592901 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.823610067 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.823625088 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.823719978 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.825301886 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.825320959 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.825367928 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.825402975 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.825423002 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.825458050 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.825531960 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.833929062 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.833947897 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.833962917 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.833983898 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.834023952 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.834037066 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.834088087 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.838804960 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:10.838844061 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:10.838922977 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:10.840204000 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:10.840220928 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:10.858320951 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.858355999 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.858376026 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.858400106 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:10.858438969 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:10.858448982 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:10.858494997 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:10.923450947 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.923485041 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.923546076 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.923569918 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.923597097 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.923619032 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.923865080 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.923891068 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.923930883 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.923943996 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.923966885 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.923985958 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.962284088 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.962306976 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.962321043 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.962358952 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.962383032 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.962397099 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.962399006 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.962412119 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:10.962450981 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.962460995 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:10.962488890 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.028284073 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.028311014 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.028376102 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.028394938 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.028445959 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.028445959 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.029551983 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.029581070 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.029664993 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.029664993 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.029675007 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.029750109 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.036896944 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:11.036973953 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:11.038249969 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:11.038343906 CET	443	49753	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:11.038399935 CET	49753	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:11.040992975 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.041008949 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.041035891 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.041069031 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.041099072 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.041120052 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.041150093 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.070807934 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.070836067 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.070900917 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.070916891 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.070964098 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.070964098 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.076364040 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.076383114 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.076455116 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.076467991 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.076534033 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.101000071 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.101023912 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.101059914 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.101090908 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.101095915 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.101115942 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.101161003 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.101181984 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.101186037 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.101222992 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.122461081 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.122483015 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.122560024 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.122592926 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.122661114 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.125163078 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.125189066 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.125258923 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.125288010 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.125397921 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.129101992 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.129127979 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.129205942 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.129216909 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.129281044 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.148868084 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.148891926 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.148941040 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.148967981 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.148982048 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.149009943 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.149858952 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.149878025 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.149925947 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.149935961 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.149971962 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.149991035 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.168355942 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.168380022 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.168431044 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.168447971 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.168483973 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.168504000 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.170669079 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.170732021 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.170762062 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.170775890 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.170805931 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.170819998 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.214205027 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.214231968 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.214344025 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.214363098 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.214416981 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.214646101 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.214670897 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.214772940 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.214782953 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.214828968 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.214828968 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.214931011 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.231122971 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.231147051 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.231219053 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.231246948 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.231267929 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.231301069 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.240900040 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.240925074 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.240988970 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.241003036 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.241063118 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.241063118 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.251346111 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.251370907 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.251429081 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.251450062 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.251499891 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.263228893 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.263250113 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.263331890 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.263341904 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.263397932 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.265084028 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.265109062 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.265199900 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.265227079 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.265304089 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.270179987 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.270199060 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.270267010 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.270273924 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.270334959 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.286197901 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.286217928 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.286236048 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.286252975 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.286292076 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.286318064 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.286393881 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.286393881 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.286416054 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.286423922 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.286457062 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.292187929 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.292213917 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.292272091 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.292279005 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.292311907 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.292319059 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.295329094 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.295380116 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.295419931 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.295440912 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.295468092 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.295492887 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.298131943 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.298186064 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.298254013 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.298265934 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.298302889 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.298311949 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.307096958 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.307164907 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.307199955 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.307219982 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.307246923 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.307262897 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.310339928 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.310360909 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.310425043 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.310434103 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.310486078 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.313498020 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.313524961 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.313579082 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.313589096 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.313633919 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.313633919 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.325113058 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.325130939 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.325197935 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.325206995 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.325246096 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.327714920 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.327747107 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.327837944 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.327837944 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.327847004 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.327917099 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.337852955 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.337871075 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.337979078 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.337986946 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.338033915 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.341506004 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.341543913 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.341615915 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.341623068 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.341675043 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.341675043 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.348967075 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.348984957 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.349051952 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.349060059 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.349098921 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.361162901 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.361181021 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.361262083 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.361269951 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.361311913 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.404835939 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.404855013 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.404911995 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.404922009 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.405013084 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.419809103 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.419812918 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.419857979 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.419863939 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.419925928 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.419925928 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.419951916 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.419966936 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.420012951 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.420012951 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.420025110 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.420099974 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.432946920 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.432990074 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.433043957 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.433069944 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.433084965 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.433106899 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.434021950 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.434043884 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.434164047 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.434178114 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.434185028 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.434196949 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.434259892 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.434268951 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.434333086 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.434333086 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.447990894 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.448012114 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.448085070 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.448118925 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.448179960 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.450356007 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.450402975 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.450515985 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.450525045 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.450526953 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.450548887 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.450598955 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.450598955 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.450613022 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.450639009 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.450654030 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.461930990 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.461950064 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.462017059 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.462033033 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.462080002 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.462469101 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.462486029 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.462570906 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.462578058 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.462759018 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.464279890 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.464302063 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.464389086 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.464416027 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.464510918 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.472157001 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.472173929 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.472260952 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.472269058 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.472323895 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.475747108 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.475766897 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.475819111 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.475826979 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.475877047 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.480396986 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.480489016 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.480530977 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.480552912 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.480571985 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.480586052 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.482728004 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.482744932 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.482808113 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.482815981 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.482882023 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.486432076 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.486449957 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.486512899 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.486521006 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.486561060 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.486562014 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494323969 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494358063 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494410992 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494419098 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494432926 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494437933 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494441986 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494462013 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494501114 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494508982 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494541883 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494577885 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494589090 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494618893 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494637966 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494637966 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494698048 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494785070 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494810104 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494848967 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494864941 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.494893074 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.494909048 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.503376007 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.503392935 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.503449917 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.503458977 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.503511906 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.505228996 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.505253077 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.505299091 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.505306959 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.505372047 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.505373001 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.509454012 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.509475946 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.509569883 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.509596109 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.509614944 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.509634972 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.512490034 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.512506962 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.512613058 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.512623072 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.512669086 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.516535044 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.516562939 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.516683102 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.516694069 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.516706944 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.516822100 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.520450115 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.520471096 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.520543098 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.520561934 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.520658970 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.525616884 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.525645971 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.525784969 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.525830984 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.525903940 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.527352095 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.527375937 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.527448893 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.527456999 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.527498007 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.527498007 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.528913021 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.528930902 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.528992891 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.528999090 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.529042006 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.536946058 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.536968946 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.537070990 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.537070990 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.537085056 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.537139893 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.537329912 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.537352085 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.537412882 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.537421942 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.537463903 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.546180010 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.546195984 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.546252012 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.546262980 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.546303988 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.547174931 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.547198057 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.547338009 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.547348976 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.547406912 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.558337927 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.558358908 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.558450937 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.558463097 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.558605909 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.608839989 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.608870983 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.608932018 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.608942032 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.609004021 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.609004021 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.609707117 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.609725952 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.609811068 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.609822989 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.609863997 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.628165960 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.628184080 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.628326893 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.628348112 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.628463030 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.628638983 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.628669977 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.628720999 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.628730059 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.628773928 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.628773928 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.636835098 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.636852026 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.636914015 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.636920929 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.636943102 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.636965036 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.637530088 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.637548923 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.637610912 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.637618065 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.637685061 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.637685061 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.638904095 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.638931036 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.638973951 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.639009953 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.639034033 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.639133930 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.646358013 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.646374941 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.646425962 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.646431923 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.646483898 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.646493912 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.646505117 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.646511078 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.646558046 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.646565914 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.646615028 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.649624109 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.649652004 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.649694920 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.649718046 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.649740934 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.649772882 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.654711008 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.654730082 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.654860973 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.654870033 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.654938936 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.655267000 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.655284882 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.655339003 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.655347109 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.655380964 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.655391932 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.661087990 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.661109924 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.661183119 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.661211014 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.661223888 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.661267996 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.662995100 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.663011074 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.663113117 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.663121939 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.663145065 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.663331985 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.664166927 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.664182901 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.664237022 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.664243937 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.664279938 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.664302111 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.671295881 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.671329021 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.671334028 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.671365023 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.671416998 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.671436071 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.671495914 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.671503067 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.671557903 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.671557903 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.671557903 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.672292948 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.672343969 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.672403097 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.672478914 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.672514915 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.672532082 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.678839922 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.678857088 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.678906918 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.678921938 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.678982973 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.680363894 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.680386066 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.680453062 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.680466890 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.680500031 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.680500031 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.683475971 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.683532953 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.683542967 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.683566093 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.683592081 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.683613062 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.686486006 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.686502934 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.686582088 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.686589003 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.686743975 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.689162970 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.689181089 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.689353943 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.689369917 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.689440966 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.693779945 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.693800926 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.693876028 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.693900108 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698029041 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698051929 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698112965 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.698116064 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.698129892 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698149920 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.698179007 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.698792934 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698822975 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698903084 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.698903084 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.698920012 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.698962927 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.704423904 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.704451084 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.704503059 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.704513073 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.704540014 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.704564095 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.704952002 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.704969883 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.705035925 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.705053091 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.706994057 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.707016945 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.707098007 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.707099915 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.707109928 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.707134962 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.707190990 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.711815119 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.711838007 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.711888075 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.711895943 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.711930037 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.711950064 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.714653969 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.714732885 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.714734077 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.714770079 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.714796066 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.714808941 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.715189934 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.715214968 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.715260983 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.715270996 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.715316057 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.715316057 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.719387054 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.719404936 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.719475031 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.719484091 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.719521999 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.722441912 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.722465038 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.722537041 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.722537041 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.722544909 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.722592115 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.726182938 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.726200104 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.726274014 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.726280928 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.726344109 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.730771065 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.730796099 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.730882883 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.730882883 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.730890989 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.731059074 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.733544111 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.733561039 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.733620882 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.733628035 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.733665943 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.738219976 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.738240004 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.738298893 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.738306046 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.738363028 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.738363028 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.740041018 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.740061998 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.740129948 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.740137100 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.740180969 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.746566057 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.746587038 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.746638060 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.746645927 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.746682882 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.746705055 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.823621035 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.823656082 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.823734999 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.823755026 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.823801041 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.823823929 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.823909998 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.823928118 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.823993921 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.824007988 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.824049950 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.841475010 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.841502905 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.841579914 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.841603994 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.841691017 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.842837095 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.842864037 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.842966080 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.842977047 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.842998028 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.843027115 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.848011017 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.848033905 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.848099947 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.848110914 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.848162889 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.849862099 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.849883080 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.849951982 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.849967003 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.849976063 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.850090981 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.853436947 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.853467941 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.853521109 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.853555918 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.853574991 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.853653908 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.854270935 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.854295969 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.854346991 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.854353905 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.854454994 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.854454994 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.858602047 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.858618975 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.858681917 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.858690977 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.858726025 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.858776093 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.859039068 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.859673023 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.859694958 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.860239983 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.860245943 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.861605883 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.861623049 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.861737013 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.861754894 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.861800909 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.862914085 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.862941027 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.863019943 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.863056898 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.863079071 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.863106966 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.867490053 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.867508888 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.867604971 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.867619991 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.867670059 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.869117022 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.869133949 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.869220018 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.869230032 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.869297981 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.871078014 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.871109009 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.871155977 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.871181011 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.871202946 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.871226072 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.875564098 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.875581026 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.875719070 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.875727892 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.875782013 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.876400948 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.876416922 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.876526117 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.876533985 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.876606941 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.880371094 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.880399942 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.880445957 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.880474091 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.880491018 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.880569935 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.881544113 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.881558895 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.881675959 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.881691933 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.881747007 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.884634972 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.884650946 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.884766102 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.884773970 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.884829998 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.886734962 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.886754036 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.886957884 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.886967897 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.887063980 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.888938904 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.888959885 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.889004946 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.889043093 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.889060974 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.889168978 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.892565966 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.892581940 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.892654896 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.892663956 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.892734051 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.898277998 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.898294926 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.898345947 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.898366928 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.898382902 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.898612022 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.902010918 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.902040958 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.902100086 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.902112007 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.902127028 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.902210951 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.902364969 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.902384043 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.902441978 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.902451992 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.902471066 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.902491093 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.907742977 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.907768011 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.907841921 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.907861948 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.907908916 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.907953024 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.907980919 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.908015013 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.908024073 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.908067942 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.908797979 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.908819914 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.908885002 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.908891916 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.908930063 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.908967018 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.914639950 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.914655924 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.914714098 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.914721966 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.914870024 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.915486097 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.915507078 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.915585041 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.915585041 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.915592909 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.915724993 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.915733099 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.915740967 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.915792942 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.915815115 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.915971994 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.917656898 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.917675972 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.917752028 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.917762041 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.917843103 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.921140909 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.921158075 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.921220064 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.921227932 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.921273947 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.921745062 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.921767950 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.921842098 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.921849012 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.921876907 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.921936989 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.927165985 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.927448034 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.927464962 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.927537918 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.927551031 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.927594900 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.927753925 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.927777052 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.928247929 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.928255081 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.928513050 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.928535938 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.928600073 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.928615093 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.928741932 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.933955908 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.933971882 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.934017897 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.934025049 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.934075117 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.934705973 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.934727907 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.934791088 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.934799910 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.934884071 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.934919119 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.939835072 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.939853907 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.939934015 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.939944029 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.939991951 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.941505909 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.941535950 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.941577911 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.941586971 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:11.941623926 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.941719055 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:11.958849907 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.958869934 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.959419966 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.959420919 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.959440947 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.959460974 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.960076094 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.960083008 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:11.960290909 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:11.960297108 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.011764050 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.011790991 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.011856079 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.011869907 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.011894941 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.011945009 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.013087988 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.013109922 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.013181925 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.013195038 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.013240099 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.049705029 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.049729109 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.049798012 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.049813986 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.049871922 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.052247047 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.052268028 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.052428007 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.052440882 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.052494049 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.055732965 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.055752039 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.055841923 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.055850983 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.055958033 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.061285973 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.061301947 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.061376095 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.061391115 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.061479092 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.061532021 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.061549902 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.061602116 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.061609030 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.061645031 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.061645031 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.063723087 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.063761950 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.063828945 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.063855886 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.063872099 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.063896894 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.067641973 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.067661047 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.067747116 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.067747116 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.067756891 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.067862034 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.068958044 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.068978071 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.069107056 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.069113970 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.069245100 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.071381092 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.071403980 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.071471930 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.071491957 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.072788000 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.072804928 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.072921991 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.072931051 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.072961092 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.072983027 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.077817917 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.077841997 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.077877998 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.077883959 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.078042030 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.078675985 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.078701973 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.078761101 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.078777075 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.078788042 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.079034090 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.080796957 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.080817938 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.080871105 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.080893040 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.080909014 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.080929995 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.084371090 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.084388971 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.084479094 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.084486961 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.084671021 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.086678028 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.086730957 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.086749077 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.086750031 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.086766005 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.086791992 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.086805105 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.086812973 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.086860895 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.086860895 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.087035894 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.087035894 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.087050915 CET	443	49756	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.087415934 CET	49756	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.090125084 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.090143919 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.090223074 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.090238094 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.090290070 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.095107079 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.095125914 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.095257998 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.095267057 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.095590115 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.098912954 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.098929882 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.099009037 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.099030972 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.099075079 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103152037 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.103182077 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.103260994 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103276014 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.103306055 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103338957 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103537083 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.103564978 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.103612900 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103624105 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.103647947 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103662014 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.103991985 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.104008913 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.104099989 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.104108095 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.104171991 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.108194113 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.108247042 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.108298063 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.108314037 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.108339071 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.108357906 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.108782053 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.108804941 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.108851910 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.108860016 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.108874083 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.108911037 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.109179020 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.109201908 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.109240055 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.109245062 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.109277010 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.109297037 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.114464998 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.114489079 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.114567041 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.114573956 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.114631891 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.114631891 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.115982056 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.116000891 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.116096973 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.116105080 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.116163015 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.116182089 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.116206884 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.116250038 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.116266966 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.116286993 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.116301060 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.120352983 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.120374918 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.120482922 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.120491028 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.120579004 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.122430086 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.122447014 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.122529030 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.122535944 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.122575045 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.125452042 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.125472069 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.125516891 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.125533104 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.125557899 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.125607967 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.125669003 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.125690937 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.125724077 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.125746012 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.125761986 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.125796080 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.128209114 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128226042 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128355980 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.128365040 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128415108 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.128654003 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128671885 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128681898 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128720045 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.128726006 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128774881 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.128782034 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.128791094 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.128860950 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.135242939 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.135257959 CET	49757	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.135258913 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.135273933 CET	443	49757	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.135303020 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.135308027 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.135360956 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.140995979 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.141011000 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.141089916 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.141097069 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.141134977 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.176157951 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.176933050 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.176970005 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.177504063 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.177511930 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.215307951 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.215337992 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.215416908 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.215429068 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.215483904 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.262741089 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.262765884 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.262836933 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.262862921 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.263020039 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.271456957 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.271473885 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.271555901 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.271567106 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.271622896 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.273633003 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.273654938 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.273710012 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.273744106 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.273765087 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.273798943 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.280354023 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.280374050 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.280481100 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.280491114 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.280555964 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.281203985 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.281240940 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.281339884 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.283021927 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.283051014 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.283123970 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.283145905 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.283184052 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.283204079 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.284192085 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.284205914 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.284357071 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.284409046 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.284419060 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.284446955 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.284492016 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.285109997 CET	49754	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.285132885 CET	443	49754	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.289407969 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.289423943 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.289562941 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.289572001 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.289625883 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.297020912 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.297039032 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.297100067 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.297116995 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.297178030 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.306277037 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.306296110 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.306453943 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.306463957 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.306607962 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.311429024 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.311605930 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.311655998 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.311913013 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.311933994 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.311945915 CET	49760	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.311953068 CET	443	49760	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.314239979 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.314255953 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.314372063 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.314380884 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.314455986 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.315443993 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.315473080 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.315630913 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.315735102 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.315747976 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.319500923 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.319536924 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.319601059 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.319603920 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.319627047 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.319711924 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.321250916 CET	49758	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.321261883 CET	443	49758	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.321655035 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.321679115 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.321721077 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.321727991 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.321760893 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.321783066 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.328115940 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.328139067 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.328207016 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.328213930 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.328249931 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.328471899 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.329560041 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.329580069 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.330038071 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.330914021 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.331000090 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.331064939 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.333975077 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.333993912 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.334043026 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.334048986 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.334089041 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.337840080 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.337892056 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.337924957 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.337933064 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.337971926 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.337975025 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.338015079 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.344475031 CET	49755	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.344484091 CET	443	49755	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.374449968 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.374464035 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.396187067 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.396245956 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.396317005 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.397267103 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.397331953 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.397397995 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.399286032 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.399352074 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.399430990 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.417188883 CET	49762	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.417210102 CET	443	49762	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.418333054 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.418355942 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.418368101 CET	49761	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.418375015 CET	443	49761	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.422660112 CET	49759	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.422677040 CET	443	49759	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.427334070 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.427370071 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.427493095 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.428150892 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.428185940 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.428318977 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.428333044 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.428345919 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.428605080 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.428617001 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.428914070 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.428922892 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.428980112 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.429125071 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.429136038 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.448580027 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:12.448615074 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:12.448695898 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:12.449476957 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:12.449487925 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:12.521730900 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.521770954 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.521878958 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.522727013 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.522741079 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.537503004 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.537537098 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.537673950 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.538062096 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.538078070 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.550738096 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.550771952 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.550858974 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.551103115 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:12.551120996 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:12.589025974 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:12.589174032 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:12.591259003 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:12.591268063 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:12.591557980 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:12.612353086 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.612509012 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.612709999 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.617566109 CET	49763	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.617583036 CET	443	49763	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.621524096 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.621550083 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.621618032 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.622179985 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:12.622193098 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:12.639987946 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:12.657474995 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:12.699341059 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:12.899641037 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.899683952 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.899707079 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.899769068 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.899800062 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.899853945 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.901983976 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:12.902057886 CET	443	49764	13.107.136.10	192.168.2.6
Nov 25, 2024 16:32:12.902139902 CET	49764	443	192.168.2.6	13.107.136.10
Nov 25, 2024 16:32:13.288938046 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.288961887 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.288969040 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.288981915 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.289015055 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.289042950 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:13.289057016 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.289099932 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:13.289099932 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:13.309954882 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.310034990 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.310081959 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:13.310101032 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:13.310373068 CET	49765	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:13.310389042 CET	443	49765	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:13.965801954 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:13.965883970 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:13.966830015 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:13.966837883 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:13.967128992 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:13.967134953 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.133399010 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.144121885 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.144141912 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.144772053 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.144794941 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.145906925 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.145988941 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.151494980 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.151501894 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.151734114 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.151741028 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.151906013 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.151967049 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.199631929 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.199723959 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.207180023 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.207186937 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.207457066 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.207462072 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.226773024 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.226948023 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.227355957 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.227364063 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.227655888 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.227662086 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.228086948 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.228153944 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.228441000 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.228454113 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.228733063 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.228741884 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.247541904 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.247740030 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.247996092 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.248025894 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.248307943 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.248341084 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.248650074 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.248656988 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.248722076 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.248729944 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.395764112 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.396377087 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.396403074 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.396897078 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.396902084 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.463531017 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.463551044 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.463583946 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.463644028 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.463664055 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.463701963 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.463723898 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.497973919 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.500138044 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.500154972 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.501034975 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.501041889 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.571841002 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.572002888 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.572170019 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.572314978 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.572335958 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.572343111 CET	49767	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.572359085 CET	443	49767	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.575712919 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.575763941 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.575974941 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.576165915 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.576174974 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.649868011 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.649894953 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.649965048 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.649986029 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.650250912 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.690924883 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.690949917 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.690964937 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.691029072 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.691045046 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.691102028 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.695661068 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.695677996 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.695763111 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.695776939 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.695877075 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.697428942 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.697490931 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.697845936 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.697887897 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.697901964 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.697912931 CET	49768	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.697918892 CET	443	49768	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.699991941 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.700048923 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.700141907 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.700817108 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.700833082 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.700843096 CET	49769	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.700850010 CET	443	49769	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.701824903 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.701848030 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.702011108 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.702286959 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.702299118 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.704327106 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.704344034 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.704406977 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.704545975 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.704556942 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.723598003 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.723623037 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.723639011 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.723676920 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.723704100 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.723711014 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.723779917 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.846895933 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.846915960 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.847001076 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.847016096 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.847115993 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.865108013 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.865192890 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.865199089 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.865328074 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.868792057 CET	49771	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:14.868809938 CET	443	49771	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:14.871489048 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.871520996 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.871587992 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.871596098 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.871644974 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.871673107 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.873385906 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.873395920 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.873480082 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.873491049 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.873568058 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.890542984 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.890639067 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.891961098 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.892024040 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.892352104 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.892601967 CET	49770	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.892606020 CET	443	49770	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.893811941 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.893841028 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.893928051 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.893934965 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.893996954 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.898075104 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.898083925 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.898118973 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.898257971 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.898257971 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.898267984 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.898314953 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.901624918 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.901645899 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.901738882 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.901911020 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.901923895 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.911868095 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.911899090 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.911959887 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.911967039 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.912017107 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.912038088 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.932811022 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.932842970 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.932946920 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.932969093 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.933063984 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.939112902 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.939131975 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.939172983 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.939287901 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.939287901 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.939301014 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.939358950 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.942280054 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.942303896 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.942414045 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.942414045 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.942421913 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.942754030 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.979058027 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.979084015 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.979154110 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.979166031 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.979190111 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.979218960 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.985162973 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.985200882 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.985377073 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.986417055 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:14.986430883 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:14.989723921 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.989794970 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.989840031 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.990164995 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.990181923 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.990195990 CET	49775	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.990200996 CET	443	49775	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.993175030 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.993196011 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:14.993273973 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.993427992 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:14.993441105 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:15.063004017 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.063083887 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.063092947 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.063169956 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.066498041 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.066526890 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.066591024 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.066600084 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.066636086 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.066654921 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.071041107 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.071099043 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.071125984 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.071140051 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.071165085 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.071192026 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.085910082 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.086088896 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.086097956 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.086169958 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.090050936 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.090075016 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.090163946 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.090173960 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.090281963 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.099139929 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.099164963 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.099318027 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.099318027 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.099328041 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.099396944 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.108870029 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.108948946 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.108958006 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.109015942 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.109153986 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.109177113 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.109226942 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.109236956 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.109266996 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.109359026 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.117136955 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.117161036 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.117271900 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.117280006 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.117429972 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.119884014 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.119904041 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.119965076 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.119982958 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.120006084 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.120033979 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.122304916 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.122334957 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.122407913 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.122412920 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.122425079 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.122461081 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.132380009 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.132401943 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.132447004 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.132457018 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.132492065 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.132512093 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.139168024 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.139287949 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.139297009 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.139358997 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.142771959 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.142795086 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.142839909 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.142848015 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.142913103 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.142986059 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.143409967 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.143434048 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.143501043 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.143507004 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.143524885 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.143559933 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.145503044 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.145533085 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.145608902 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.145616055 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.145688057 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.145688057 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.167520046 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.167540073 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.167613029 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.167623043 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.167721033 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.169969082 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.169986963 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.170135975 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.170144081 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.170217991 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.190918922 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.190937042 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.191154003 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.191160917 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.191265106 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.249716043 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.249785900 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.249799013 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.249849081 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.253420115 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.253473043 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.253528118 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.253528118 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.253535986 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.253592968 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.265824080 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.265881062 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.265897989 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.266182899 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.270977974 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.270999908 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.271074057 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.271080017 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.271136999 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.271136999 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.272794008 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.272819996 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.272861958 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.272871017 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.272886038 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.272917986 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.282701969 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.282735109 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.282768011 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.282774925 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.282812119 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.283046007 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.286137104 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.286154032 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.286216021 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.286221981 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.286329031 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.288240910 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.288304090 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.288314104 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.288358927 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.292682886 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.292711020 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.292748928 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.292756081 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.292784929 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.292876005 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.299518108 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.299537897 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.299602985 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.299612045 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.299726963 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.301301956 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.301338911 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.301373959 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.301382065 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.301392078 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.301464081 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.304478884 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.304553986 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.304562092 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.304615974 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.310499907 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.310524940 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.310563087 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.310578108 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.310604095 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.310676098 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.313539982 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.313585043 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.313637018 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.313652039 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.313668966 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.313735008 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.313747883 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.313802958 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.313811064 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.313862085 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.314946890 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.314969063 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.315059900 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.315059900 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.315067053 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.315172911 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.320518017 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.320539951 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.320590019 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.320597887 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.320628881 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.320636988 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.324744940 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.324831009 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.324837923 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.324875116 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.326800108 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.326821089 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.326913118 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.326913118 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.326920986 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.326981068 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.328934908 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.328954935 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.329080105 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.329091072 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.329144001 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.330256939 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.330276966 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.330338955 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.330353975 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.330418110 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.333517075 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.333578110 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.333586931 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.333724976 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.342300892 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.342319965 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.342375040 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.342387915 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.342437983 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.342437983 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.343699932 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.343774080 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.343784094 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.343883991 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.344222069 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.344240904 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.344332933 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.344341040 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.344463110 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.356667042 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.356690884 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.356789112 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.356789112 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.356796980 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.356853008 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.367252111 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.367269993 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.367332935 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.367338896 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.367563963 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.379105091 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.379122019 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.379192114 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.379199028 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.379333019 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.388895988 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.388911963 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.389028072 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.389034033 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.389065981 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.389108896 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.444349051 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.444370031 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.444466114 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.444473028 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.444533110 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.453670979 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.453759909 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.453775883 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.453836918 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.454993963 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.455013037 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.455105066 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.455105066 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.455112934 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.455245018 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.462240934 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.462310076 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.462316036 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.462357998 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.467262983 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.467279911 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.467339993 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.467345953 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.467386007 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.468797922 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.468822956 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.468864918 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.468874931 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.468919039 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.468945026 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.470984936 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.471090078 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.471118927 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.471232891 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.477854967 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.477873087 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.477941036 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.477950096 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.478019953 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.478054047 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.478072882 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.478143930 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.478143930 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.478149891 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.478189945 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.481050968 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.481113911 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.481132984 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.481180906 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.486896992 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.486978054 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.486999035 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.487006903 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.487035036 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.487067938 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.487596989 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.487612963 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.487682104 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.487687111 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.487945080 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.488009930 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.488018036 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.488061905 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.488081932 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.494609118 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.494652987 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.494697094 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.494704008 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.494741917 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.494767904 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.495071888 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.495143890 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.495152950 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.495244026 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.497776985 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.497793913 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.497889996 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.497895956 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.498025894 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.503582001 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.503643990 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.503668070 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.503674984 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.503711939 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.503727913 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.504216909 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.504281998 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.504288912 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.504333019 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.506805897 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.506822109 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.506925106 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.506931067 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.507342100 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.507360935 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.507441044 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.507447004 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.507476091 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.507476091 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.507491112 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.511106968 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.511198044 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.511204958 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.511265993 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.511914968 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.511969090 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.512018919 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.512027025 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.512063980 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.512084007 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.516642094 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.516659021 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.516741991 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.516747952 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.516836882 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.516915083 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.516932964 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.517008066 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.517014027 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.517121077 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.518049955 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.518150091 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.518156052 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.518213987 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.520796061 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.520812988 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.520903111 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.520911932 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.521195889 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.524235964 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.524251938 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.524336100 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.524343014 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.524447918 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.526177883 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.526268959 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.526274920 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.526345968 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.529908895 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.529927969 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.530019045 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.530029058 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.530158997 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.532888889 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.532907009 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.532994986 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.533004045 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.533325911 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.535510063 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.535597086 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.535603046 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.535660982 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.541367054 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.541383982 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.541631937 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.541639090 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.541688919 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.542360067 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.542421103 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.542428970 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.542530060 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.549387932 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.549396038 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.549412012 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.549464941 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.549472094 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.549518108 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.549529076 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.549534082 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.549541950 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.549623013 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.558046103 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.558063030 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.558212996 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.558218956 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.558418036 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.558650017 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.558715105 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.558721066 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.558788061 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.565721035 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.565738916 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.565880060 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.565886021 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.565989971 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.634299994 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.634332895 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.634392023 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.634399891 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.634458065 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.642503977 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.642524958 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.642616034 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.642621040 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.642771006 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.650240898 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.650262117 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.650310040 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.650317907 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.650360107 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.650373936 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.656497002 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.656574965 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.656591892 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.656646967 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.657016993 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.657041073 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.657099962 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.657104969 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.657111883 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:15.657124043 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.657149076 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:15.657160044 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.657215118 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:15.657816887 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:15.657831907 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:15.662636995 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.662714005 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.662719965 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.662930965 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.665204048 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.665224075 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.665287971 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.665297031 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.665358067 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.665358067 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.668445110 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.668521881 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.668528080 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.668607950 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.670157909 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.670191050 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.670237064 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.670263052 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.670275927 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.670432091 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.672282934 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.672300100 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.672414064 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.672420025 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.672588110 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.676369905 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.676453114 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.676459074 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.676498890 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.678497076 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.678514004 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.678558111 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.678569078 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.678601980 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.678622007 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.680183887 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.680201054 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.680300951 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.680306911 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.680416107 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.682504892 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.682564974 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.682569981 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.682698011 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.685902119 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.685920954 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.686007023 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.686014891 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.686182022 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.689398050 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.689491987 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.689497948 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.689564943 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.693979025 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.693986893 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.694008112 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.694046021 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.694051981 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.694092035 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.694092035 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.694109917 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.694118023 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.694164991 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.698812962 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.698879957 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.698885918 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.698931932 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.702301979 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.702327967 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.702378035 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.702385902 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.702424049 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.702456951 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.705066919 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.705142975 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.705163002 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.705168009 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.705173969 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.705250978 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.705267906 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.705275059 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.705393076 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.709074020 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.709137917 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.709144115 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.709186077 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.710114002 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.710135937 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.710189104 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.710195065 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.710230112 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.710252047 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.713131905 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.713175058 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.713268042 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.713268042 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.713278055 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.713354111 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.715431929 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.715516090 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.715521097 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.715599060 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.718462944 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.718480110 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.718539000 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.718549967 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.718681097 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.719839096 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.719856977 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.719913960 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.719919920 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.719949007 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.719976902 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.720309019 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.720366001 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.720371962 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.720407009 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.726564884 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.726620913 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.726628065 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.726680040 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.727711916 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.727730989 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.727813005 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.727818966 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.727870941 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.731355906 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.731436014 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.731441975 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.731514931 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.735512018 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.735531092 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.735579014 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.735588074 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.735622883 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.735647917 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.736289024 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.736360073 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.736366987 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.736404896 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.742794991 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.742811918 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.742889881 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.742896080 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.742966890 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.750653028 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.750669956 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.750783920 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.750790119 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.750844955 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.758450031 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.758466005 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.758544922 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.758549929 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.758635998 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.765248060 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.765264988 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.765316963 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.765322924 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.765362978 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.765451908 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.776810884 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.776829958 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.776907921 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.776921034 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.777162075 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.825378895 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.825608015 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.825920105 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.825962067 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.825979948 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.826028109 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.828077078 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.828094006 CET	443	49774	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.828151941 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.828213930 CET	49774	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.875606060 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.875680923 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.875691891 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.875752926 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.879501104 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.879576921 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.879584074 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.879627943 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.883354902 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.883438110 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.883445024 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.883493900 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.888279915 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.888360977 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.888365984 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.888408899 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.892182112 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.892287970 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.892293930 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.892340899 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.893101931 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.893127918 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.893181086 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.893233061 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.893254995 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.893378973 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.897181988 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.897274017 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.897279978 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.897372961 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.899910927 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.899928093 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.899986982 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.899996042 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.900052071 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.901071072 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.901160002 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.901165009 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.901205063 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.904980898 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.905050039 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.905055046 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.905100107 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.908127069 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.908143044 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.908190966 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.908198118 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.908288002 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.909920931 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.909991980 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.909997940 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.910096884 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.913264036 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.913325071 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.913331032 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.913420916 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.916161060 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.916176081 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.916237116 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.916253090 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.916276932 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.916296959 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.916321993 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.916331053 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.916341066 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.916424036 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.918215036 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.918293953 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.918301105 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.918426037 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.921452999 CET	49766	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.921482086 CET	443	49766	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.922122002 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.922182083 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.922185898 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.922223091 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.925254107 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:15.925318003 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:15.925376892 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:15.925901890 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.925967932 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.925976038 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.926124096 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.930892944 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.930967093 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.930972099 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.931015015 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.934885979 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.934971094 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.934976101 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.935024977 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.939838886 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.939920902 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.939927101 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.939975023 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.956434011 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.956456900 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.956552029 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.956552029 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.956564903 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.956721067 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.964287043 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.964303970 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.964359999 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.964373112 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.964410067 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.964410067 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.971240997 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.971261978 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.971308947 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.971319914 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.971340895 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.971354008 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.978908062 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.978924036 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.978993893 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.979001045 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.979149103 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.986797094 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.986814976 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.986917019 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.986923933 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.989700079 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.994327068 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.994343996 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.994424105 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:15.994430065 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:15.994894028 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.001985073 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.002007008 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.002079964 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.002087116 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.002244949 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.008738041 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.008763075 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.008816004 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.008826971 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.008857012 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.008941889 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.076922894 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.077006102 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.077012062 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.077052116 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.080970049 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.081057072 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.081063986 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.081115961 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.085659027 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.085745096 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.085751057 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.085798025 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.089308023 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.089369059 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.089375019 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.089442968 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.093169928 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.093230963 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.093235970 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.093280077 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.098067045 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.098125935 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.098131895 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.098196983 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.101871967 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.101958036 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.101963997 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.102036953 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.105735064 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.105803967 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.105808973 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.105962038 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.105961084 CET	49734	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:32:16.105979919 CET	443	49734	172.217.21.36	192.168.2.6
Nov 25, 2024 16:32:16.110572100 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.110647917 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.110652924 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.110692024 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.115058899 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.115129948 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.115134954 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.115210056 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.119318962 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.119375944 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.119381905 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.119431973 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.123061895 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.123141050 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.123147964 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.123194933 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.127429008 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.127517939 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.127526045 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.127574921 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.131069899 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.131161928 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.131170988 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.131588936 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.135200977 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.135270119 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.135277033 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.135324001 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.139806032 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.139869928 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.139878035 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.139944077 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.157030106 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.157072067 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.157126904 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.157181978 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.157232046 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.175177097 CET	49772	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.175188065 CET	443	49772	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.250993013 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.251013041 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.251260042 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.251607895 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.251616001 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.278392076 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.278531075 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.278543949 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.278640985 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.283019066 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.283139944 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.283145905 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.283221006 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.286730051 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.286809921 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.286813974 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.286873102 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.286995888 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.286995888 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.287009954 CET	443	49773	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.287089109 CET	49773	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.473162889 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.474329948 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.474350929 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.474831104 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.474836111 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.513571024 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.518321991 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.522325993 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.522361040 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.522911072 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.522917032 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.523200035 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.523219109 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.523576021 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.523580074 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.572118998 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.572207928 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.573112965 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.573120117 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.573471069 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:16.573477030 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:16.733972073 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.737478018 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.737514019 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.737945080 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.737950087 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.907277107 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.908694029 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.908729076 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.909193039 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.909199953 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.921715021 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.921797991 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.921883106 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.922166109 CET	49778	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.922183990 CET	443	49778	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.925105095 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.925148010 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.925407887 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.925579071 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.925594091 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.966728926 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.966794014 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.966875076 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.967073917 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.967092991 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.967104912 CET	49779	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.967111111 CET	443	49779	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.969099045 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.969264030 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.969441891 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.970271111 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.970276117 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.970285892 CET	49777	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.970289946 CET	443	49777	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.971198082 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.971232891 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.971381903 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.971529961 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.971545935 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.972657919 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.972685099 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:16.972853899 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.973098040 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:16.973119020 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.077765942 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.077790022 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.077805042 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.077853918 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.077871084 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.077897072 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.077939987 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.179835081 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.179904938 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.179955006 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.181472063 CET	49780	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.181495905 CET	443	49780	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.187262058 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.187299967 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.187374115 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.187783003 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.187797070 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.209980011 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:17.210017920 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:17.210133076 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:17.223920107 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:17.223938942 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:17.270842075 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.270869970 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.270946980 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.270963907 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.271020889 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.328598976 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.328620911 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.328677893 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.328697920 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.328747988 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.328747988 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.370706081 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.370789051 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.370865107 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.376852036 CET	49782	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.376871109 CET	443	49782	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.383006096 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.383043051 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.383296013 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.383733988 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:17.383748055 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:17.449022055 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.449048996 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.449110985 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.449125051 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.449182987 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.449182987 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.490941048 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.490966082 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.491091013 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.491102934 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.491173983 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.510051012 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.510077000 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.510222912 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.510232925 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.510283947 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.531960011 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.531977892 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.532047987 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.532068014 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.532114029 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.806662083 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.806715965 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.806996107 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.807589054 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.807604074 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.886949062 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.886961937 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887000084 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887031078 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887049913 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887085915 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887100935 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887487888 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887506008 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887593985 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887593985 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887603045 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887664080 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887725115 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887742043 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887809038 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887816906 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.887833118 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.887885094 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.888122082 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.888135910 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.888170958 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.888225079 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.888230085 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.888278961 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.890391111 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.890404940 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.890454054 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.890464067 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.890522957 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.890522957 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.910952091 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.910969019 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.911055088 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.911067009 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.911305904 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.949716091 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.949760914 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.949845076 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.956749916 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:17.956767082 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:17.977436066 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:17.977514982 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:17.979963064 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:17.979969978 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:17.980290890 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:17.982577085 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:17.982947111 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:17.982953072 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:17.983179092 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:18.012839079 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.012881041 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.012932062 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.012944937 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.012979984 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.012995958 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.023358107 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:18.034264088 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.034287930 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.034365892 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.034377098 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.034413099 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.034413099 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.056739092 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.056766987 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.056823015 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.056832075 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.056888103 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.076956034 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.076977968 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.077056885 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.077069998 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.077143908 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.095968962 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.095987082 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.096045017 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.096054077 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.096100092 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.096100092 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.117572069 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.117588043 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.117680073 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.117691040 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.117737055 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.139090061 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.139106989 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.139162064 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.139172077 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.139204979 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.139278889 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.156488895 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.156506062 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.156605959 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.156615019 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.156670094 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.175504923 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.175522089 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.175609112 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.175616980 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.175657988 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.191109896 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.191128016 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.191221952 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.191231012 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.191273928 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.208762884 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.208781958 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.208926916 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.208936930 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.209050894 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.221795082 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.221815109 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.221913099 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.221923113 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.222049952 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.235761881 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.235778093 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.235894918 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.235903978 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.235964060 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.248953104 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.248970985 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.249078989 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.249088049 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.249145031 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.259670019 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.259690046 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.259761095 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.259769917 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.259855986 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.263111115 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.263186932 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.263194084 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.263207912 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.263322115 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.263322115 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.269875050 CET	49781	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:18.269897938 CET	443	49781	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:18.303837061 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.304461002 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.304475069 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.305505991 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.305569887 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.307364941 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.307416916 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.307909966 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.307918072 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.407675028 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.656337023 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:18.656435966 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:18.656497002 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:18.656816959 CET	49783	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:18.656838894 CET	443	49783	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:18.710563898 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.711456060 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.711474895 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.712106943 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.712111950 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.729284048 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.729868889 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.729888916 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.730631113 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.730637074 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.799978018 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800009012 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800019026 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800050020 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800064087 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800066948 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.800072908 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800091028 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.800111055 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.800138950 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.832029104 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.832736969 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.832762957 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.833245993 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.833252907 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.892833948 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:18.892875910 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:18.893364906 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:18.894299030 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:18.894314051 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:18.961704969 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.962503910 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.962537050 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.962821960 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.962830067 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.985099077 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.985112906 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.985140085 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.985230923 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.985230923 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:18.985241890 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:18.985421896 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.372661114 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372678041 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372724056 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372819901 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.372819901 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.372838974 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372889042 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372910023 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372940063 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.372966051 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372973919 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.372999907 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.373035908 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.373055935 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.373100042 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.373147011 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.373486996 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.373703957 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.373723030 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.373754025 CET	49790	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.373779058 CET	443	49790	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.374463081 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.374701977 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.375684977 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.375700951 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.375752926 CET	49789	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.375758886 CET	443	49789	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.376682043 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.376682043 CET	49791	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.376688957 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.376697063 CET	443	49791	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.377774954 CET	49784	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.377788067 CET	443	49784	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.384414911 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.384428978 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.384444952 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.384459972 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.384540081 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.384646893 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.385313988 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.385344982 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.385477066 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.385478973 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.385493994 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.385890007 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.385906935 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.386281967 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.386301994 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.398278952 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.398291111 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.398977041 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.399461985 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.401880026 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.401940107 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.427715063 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.428834915 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.428834915 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.428867102 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.428874016 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.447151899 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.447437048 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.447993994 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.447993994 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.447999954 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.448014975 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.532958031 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.533010960 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.533166885 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.533370972 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.533391953 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.642904997 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.642980099 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.643307924 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.643307924 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.646291971 CET	49792	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.646301985 CET	443	49792	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.646526098 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.646563053 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.646739006 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.646893024 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.646908045 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.700567961 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.700720072 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.701713085 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.701721907 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.702234983 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.702240944 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.874763966 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.874828100 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.874898911 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.875204086 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.875217915 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.875267029 CET	49794	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.875272989 CET	443	49794	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.881942034 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.881994963 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.882330894 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.882714033 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:19.882729053 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:19.927891970 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.927937031 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.927953005 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.927962065 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.927985907 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:19.928000927 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.928042889 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:19.928442955 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.928508043 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.928510904 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.928538084 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.928560972 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.928589106 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.933454990 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.933537006 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:19.933578014 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:19.933630943 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:20.116475105 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.116503954 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.116550922 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.116571903 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.116602898 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.116624117 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.167962074 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.167988062 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.168073893 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.168087959 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.168323040 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.231695890 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.231719017 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.231735945 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.231872082 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.231920004 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.231971979 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.285140991 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.285171986 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.285262108 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.285275936 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.286293983 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.323147058 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.323168039 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.323252916 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.323262930 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.323308945 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.331849098 CET	49793	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:20.331865072 CET	443	49793	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:20.355900049 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.355928898 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.355998993 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.356009960 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.356043100 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.467374086 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.467413902 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.467454910 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.467468977 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.467515945 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.483567953 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.483578920 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.483655930 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.483681917 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.483706951 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.483724117 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.483751059 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.490178108 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.490242004 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.490245104 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.490267038 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.490309000 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.509243011 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.509265900 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.509322882 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.509335995 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.509368896 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.509383917 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.531532049 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.531550884 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.531621933 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.531635046 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.531759977 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.543714046 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.543739080 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.543788910 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.543808937 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.543837070 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.543855906 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.553462982 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.553481102 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.553531885 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.553540945 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.553575039 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.553590059 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.559504986 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.559562922 CET	443	49795	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.559578896 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.559608936 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.611892939 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.611918926 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.611963987 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.611989021 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.612021923 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.612031937 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.650434971 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:20.650578976 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:20.651222944 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:20.651292086 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:20.671788931 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.671811104 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.671873093 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.671905041 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.671917915 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.671947002 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.673721075 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:20.673733950 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:20.674015999 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:20.674034119 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:20.674139977 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:20.715648890 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.715673923 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.715790987 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.715806961 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.715879917 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.719345093 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:20.738715887 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.738734007 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.738811016 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.738825083 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.738871098 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.773334026 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.773386002 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.773415089 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.773425102 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.773468971 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.795995951 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.796016932 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.796093941 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.796103954 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.796205997 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.818967104 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.818984985 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.819073915 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.819087029 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.819175959 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.841315985 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.841336966 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.841387987 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.841396093 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.841443062 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.855452061 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.855501890 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.855530024 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.855537891 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.855555058 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:20.855575085 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.855596066 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.857979059 CET	49796	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:20.857991934 CET	443	49796	150.171.27.10	192.168.2.6
Nov 25, 2024 16:32:21.093677998 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:21.093755960 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:21.093758106 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:21.093806028 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:21.093951941 CET	49797	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:21.093969107 CET	443	49797	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:21.105878115 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.107816935 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.107845068 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.108643055 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.108652115 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.110879898 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:21.110902071 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:21.110980034 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:21.111555099 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:21.111566067 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:21.170047998 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.170568943 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.170591116 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.171034098 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.171040058 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.174834967 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.175309896 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.175332069 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.175962925 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.175970078 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.252055883 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.252573967 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.252603054 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.253664017 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.253734112 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.254415989 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.254482031 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.254724026 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.254733086 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.294145107 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.429682970 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.430490017 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.430526972 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.431363106 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.431370974 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.543621063 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.543694973 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.543775082 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.544166088 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.544190884 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.544205904 CET	49798	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.544215918 CET	443	49798	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.548707008 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.548737049 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.548841000 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.548995972 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.549010992 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.611484051 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.611954927 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.611973047 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.612493038 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.612498999 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.615607977 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.615668058 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.615716934 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.615809917 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.615823984 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.615834951 CET	49800	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.615840912 CET	443	49800	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.618407965 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.618489027 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.618562937 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.618697882 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.618730068 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.620542049 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.620609999 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.620670080 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.620789051 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.620803118 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.620836020 CET	49799	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.620841980 CET	443	49799	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.623255014 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.623272896 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.623358011 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.623487949 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.623501062 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751549959 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751575947 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751585960 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751607895 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751635075 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751662016 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.751743078 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.751820087 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.751820087 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.929557085 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.929583073 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.929857016 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.929910898 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.930421114 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.936235905 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.936301947 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.936497927 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.936633110 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.936633110 CET	49804	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.936650038 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.936660051 CET	443	49804	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.939361095 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.939433098 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.939591885 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.939729929 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.939763069 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.977246046 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.977264881 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.977464914 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.977523088 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.977636099 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.983839035 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.983915091 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:21.983954906 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.984035015 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.986282110 CET	49803	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:21.986318111 CET	443	49803	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.168874979 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.168967009 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.169085026 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:22.169323921 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:22.169323921 CET	49805	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:22.169349909 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.169358015 CET	443	49805	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.173223019 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:22.173275948 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.173455954 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:22.173548937 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:22.173557043 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:22.364339113 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.364387035 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:22.364566088 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.365446091 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.365479946 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:22.365629911 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.366044998 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.366055012 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:22.366151094 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.371917963 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.371934891 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:22.372200012 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.372214079 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:22.373048067 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:22.373061895 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:22.808784008 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:22.810287952 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:22.866317987 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:22.866333961 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:22.866641045 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:22.866647005 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:22.866667032 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:22.866734028 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:23.314404964 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.315013885 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:23.315031052 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.315536022 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:23.315540075 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.480864048 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.481679916 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:23.481710911 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.482302904 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:23.482309103 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.523149014 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.523758888 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:23.523792028 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:23.524529934 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:23.524537086 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.087876081 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.087956905 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.088161945 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:24.088193893 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.088241100 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:24.088260889 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.088260889 CET	49807	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.088269949 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.088279009 CET	443	49807	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.088303089 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:24.088303089 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:24.088540077 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:24.088556051 CET	443	49806	2.16.158.96	192.168.2.6
Nov 25, 2024 16:32:24.088588953 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:24.088973999 CET	49806	443	192.168.2.6	2.16.158.96
Nov 25, 2024 16:32:24.091157913 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.092437983 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.092452049 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.093564034 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.093564034 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.093580961 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.093590021 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.093628883 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.093801975 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.093818903 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.094129086 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:24.094166040 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:24.094181061 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.094274044 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:24.094744921 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.094764948 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.094928980 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.094933987 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.095261097 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:24.095276117 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:24.343453884 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343532085 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343554974 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343627930 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343703032 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.343703985 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.343830109 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.343844891 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343882084 CET	49809	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.343888044 CET	443	49809	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343919039 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.343934059 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.343967915 CET	49808	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.343975067 CET	443	49808	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.347129107 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.347145081 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.347172022 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.347181082 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.347290993 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.347292900 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.347456932 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.347460032 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.347476006 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.347476959 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.568193913 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.568510056 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.568531036 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.569581032 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.569881916 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.570749044 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.570820093 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.570983887 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.570991993 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.575443029 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.575747013 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.575762033 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.576324940 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.576687098 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.576698065 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.576806068 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.576920986 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.578097105 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.578097105 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.578115940 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.578183889 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.581351995 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.581578016 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.581950903 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.582024097 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.582048893 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.623338938 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.623888969 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.623955965 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.624133110 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.624366045 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.624391079 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.624428034 CET	49810	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.624443054 CET	443	49810	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.626144886 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.626144886 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.626152992 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.626152039 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.626163960 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:24.626858950 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.626918077 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.626979113 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.627160072 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.627166033 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.627196074 CET	49811	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.627199888 CET	443	49811	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.629267931 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.629266977 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.629302025 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.629307032 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.629390955 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.629393101 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.629658937 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.629664898 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:24.629683971 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.629687071 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:24.671643019 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:24.671643019 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.092935085 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.096479893 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.118072987 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.139081955 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.139087915 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.162245035 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.170821905 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.170835018 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.170866013 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.170878887 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.170905113 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.170979023 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.171000004 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.171017885 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.171046972 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.182668924 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.182683945 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.182703972 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.182713032 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.182735920 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.182764053 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.182782888 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.182809114 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.182857990 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.216656923 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216686010 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216702938 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216763973 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216784954 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216805935 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.216806889 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.216830015 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216842890 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.216856003 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.216856003 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.216932058 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.216941118 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.261746883 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.341247082 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.341262102 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.341310978 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.341391087 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.341434956 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.341454029 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.342036963 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.345216990 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.345227957 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.345273018 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.345290899 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.345293999 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.345319986 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.345335007 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.345364094 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.345376968 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.365961075 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.366005898 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.366056919 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.366070032 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.366102934 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.366111994 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.366137981 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.366142988 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.368310928 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.415872097 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.415895939 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.415947914 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.415966034 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.416009903 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.419971943 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.419982910 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.420023918 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.420046091 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.420063972 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.420090914 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.420104027 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.442672014 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.442729950 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.442810059 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.442819118 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.442848921 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.442883015 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.515893936 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.515921116 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.516012907 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.516042948 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.516086102 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.517312050 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.517338037 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.517376900 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.517388105 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.517417908 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.517437935 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.523181915 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.523256063 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.523263931 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.523289919 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.523374081 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.523613930 CET	49813	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.523622990 CET	443	49813	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.547403097 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.547430038 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.547492981 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.547504902 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.547554016 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.548208952 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.548228025 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.548304081 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.548326015 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.548368931 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.568306923 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.568330050 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.568377972 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.568386078 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.568416119 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.568434954 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.572093010 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.572125912 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.572169065 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.572180986 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.572211981 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.572231054 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.588735104 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.588818073 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.588824987 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.588844061 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.588856936 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.588876009 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.588900089 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.589308023 CET	49814	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.589322090 CET	443	49814	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.668329000 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.668360949 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.668428898 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.668665886 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.668678999 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.705127001 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.705152988 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.705210924 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.705224037 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.705256939 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.705480099 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.722628117 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.722650051 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.722707033 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.722714901 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.722759008 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.738678932 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.738702059 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.738748074 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.738763094 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.738827944 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.753463984 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.753485918 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.753570080 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.753578901 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.753621101 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.773613930 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.773634911 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.773684025 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.773691893 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.773739100 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.786727905 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.786756039 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.786786079 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.786792994 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.786827087 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.786847115 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.848865032 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:25.848952055 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:25.849797964 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:25.849807978 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:25.850445986 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:25.850452900 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:25.931783915 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.931811094 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.931864023 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.931879997 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.931921005 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.931941986 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.945044994 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.945066929 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.945127964 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.945138931 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.945193052 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.957843065 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.957866907 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.957932949 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.957943916 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.957993984 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.966406107 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:25.969206095 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.969227076 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.969329119 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.969337940 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.969379902 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.973418951 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:25.973429918 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:25.974138975 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:25.974143982 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:25.982304096 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.982330084 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.982368946 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.982377052 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.982409000 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.982426882 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.994424105 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.994445086 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.994503975 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:25.994514942 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:25.994556904 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.007441044 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.007467985 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.007512093 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.007522106 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.007565022 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.007586002 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.020529032 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.020551920 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.020613909 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.020627975 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.020682096 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.179044008 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.179071903 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.179121971 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.179143906 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.179178953 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.179194927 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.189146042 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.189163923 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.189219952 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.189228058 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.189268112 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.198035002 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.198050976 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.198128939 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.198136091 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.198188066 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.208128929 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.208146095 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.208187103 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.208194017 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.208240986 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.208240986 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.218236923 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.218252897 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.218305111 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.218314886 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.218349934 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.227658033 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.227674961 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.227718115 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.227725983 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.227770090 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.237962008 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.237981081 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.238024950 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.238039970 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.238065004 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.238079071 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.242100954 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.242170095 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.242177010 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.242187977 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.242232084 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.242702961 CET	49815	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.242717028 CET	443	49815	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.252954960 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.252989054 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.253071070 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.253341913 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.253356934 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.283103943 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.283138037 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.283216000 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.283454895 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.283467054 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.313781023 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.313802004 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.313874960 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.314347029 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:26.314361095 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:26.314400911 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:26.314532995 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:26.314539909 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:26.314585924 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:26.314795017 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:26.314815998 CET	443	49818	150.171.28.10	192.168.2.6
Nov 25, 2024 16:32:26.314825058 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:26.314853907 CET	49818	443	192.168.2.6	150.171.28.10
Nov 25, 2024 16:32:26.337866068 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.338604927 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.338638067 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.339379072 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.339385986 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.381382942 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.381923914 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.381970882 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.382700920 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.382708073 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.406053066 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.406605005 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.406620026 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.407111883 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.407124043 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.407569885 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.407959938 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.407975912 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.408493042 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.408498049 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.435240984 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.435306072 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.435451984 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.437257051 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.437269926 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.437282085 CET	49817	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.437288046 CET	443	49817	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.440500021 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.440540075 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.440845966 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.441004992 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.441020012 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.791233063 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.791450977 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.791532040 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.791760921 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.791774988 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.791805029 CET	49820	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.791810989 CET	443	49820	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.798810959 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.798877954 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.798969030 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.799185038 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.799209118 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.838651896 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.838891029 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.839037895 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.839298964 CET	49819	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.839322090 CET	443	49819	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.843137980 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.843173027 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.843319893 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.843579054 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.843590021 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.847480059 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.847536087 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.847599030 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.847815037 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.847815037 CET	49821	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.847820044 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.847827911 CET	443	49821	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.849824905 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.849860907 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.850101948 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.850241899 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.850259066 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.871783972 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.871861935 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.872001886 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.872381926 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.872381926 CET	49822	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.872395039 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.872406006 CET	443	49822	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.874756098 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.874789000 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:26.874888897 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.875149965 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:26.875163078 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:27.509871960 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:27.510154963 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:27.510174036 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:27.511593103 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:27.511665106 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:27.512590885 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:27.512650967 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:27.512880087 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:27.512886047 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:27.559120893 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.030467033 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.067508936 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.067522049 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.067540884 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.067583084 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.067599058 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.067625999 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.067634106 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.067651987 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.107969999 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.108335972 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.108351946 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.109422922 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.109483957 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.110007048 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.110074043 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.110155106 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.121234894 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.128309965 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.128530025 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.128546000 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.129609108 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.129667044 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.129987001 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.130057096 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.130188942 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.130197048 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.151362896 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.152489901 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.152501106 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.183720112 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.199388027 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.201622963 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.202058077 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.202070951 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.203259945 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.203310966 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.208223104 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.208312035 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.208514929 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.208534002 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.261841059 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.262017965 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.262031078 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.262068033 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.262085915 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.262100935 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.262113094 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.262152910 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.262165070 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.289211035 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.290303946 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.290303946 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.290339947 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.290354013 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.342545033 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.342575073 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.342622042 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.342642069 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.342654943 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.342686892 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.342704058 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.424707890 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.424792051 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.424802065 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.424886942 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.425018072 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.425276995 CET	49824	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.425293922 CET	443	49824	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.572952032 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.573555946 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.573577881 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.574131966 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.574139118 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.578861952 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.579225063 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.579246044 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.579719067 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.579725027 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.627099037 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.630712986 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.631211042 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.631236076 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.631737947 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.631743908 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.659488916 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.668116093 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.701445103 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701456070 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701491117 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701508045 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701518059 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.701520920 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701538086 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701559067 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.701572895 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.701591969 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.729585886 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.730155945 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.730180979 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.730710030 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.730715036 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.739795923 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.746237040 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.747404099 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747415066 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747448921 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747457027 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747459888 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.747477055 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747493029 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747514963 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.747553110 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.747633934 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747716904 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.747767925 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.748156071 CET	49826	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.748168945 CET	443	49826	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.748821974 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.748883009 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.748996019 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.749249935 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.749249935 CET	49828	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.749264956 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.749273062 CET	443	49828	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.754759073 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.754801035 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.754880905 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.755012989 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:28.755021095 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:28.756366968 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.756376028 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.756438971 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.756794930 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.756805897 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.793128967 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.828010082 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.828022003 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.828047037 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.828058958 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.828077078 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.828087091 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.828103065 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.828130960 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.828166962 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.906651020 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.906663895 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.906682968 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.906689882 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.906719923 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.906735897 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.906768084 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.906796932 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.981017113 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.981026888 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.981055021 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.981086016 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.981100082 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.981132984 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.981148005 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.998059034 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.998073101 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.998102903 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.998137951 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.998152018 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:28.998178959 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:28.998198032 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.021403074 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021477938 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021554947 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.021605015 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021668911 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021717072 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.021838903 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.021857023 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021872044 CET	49829	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.021878958 CET	443	49829	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021967888 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.021974087 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.021997929 CET	49831	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.022002935 CET	443	49831	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.025012016 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.025041103 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.025171995 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.025201082 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.025202990 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.025295973 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.025387049 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.025399923 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.025485039 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.025515079 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.072381973 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.072402000 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.072475910 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.072489977 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.072552919 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.086968899 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.087035894 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.087116003 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.087337971 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.087353945 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.087384939 CET	49830	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.087390900 CET	443	49830	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.088537931 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.088558912 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.088633060 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.088644028 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.088742971 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.090842009 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.090871096 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.090960979 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.091156960 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.091169119 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.124082088 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.124098063 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.124150991 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.124170065 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.124185085 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.124212980 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.147294044 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.147316933 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.147382975 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.147399902 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.147447109 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.186225891 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.186263084 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.186311960 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.186326981 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.186355114 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.186371088 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.186784029 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.186805010 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.186847925 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.186865091 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.186888933 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.186906099 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.220901012 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.220920086 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.220979929 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.220992088 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.221019030 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.221173048 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.224349976 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.224414110 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.224670887 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.224911928 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.224930048 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.224941969 CET	49832	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.224947929 CET	443	49832	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.229423046 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.229465961 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.229558945 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.229748964 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:29.229763985 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:29.241410017 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.241439104 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.241512060 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.241523027 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.241578102 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.365288973 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.365313053 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.365366936 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.365396976 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.365416050 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.365452051 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.379221916 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.379251003 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.379340887 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.379352093 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.379399061 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.385720968 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.385740995 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.385801077 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.385811090 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.385847092 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.385854959 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.393652916 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.393681049 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.393722057 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.393732071 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.393779993 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.393799067 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.403204918 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.403228998 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.403296947 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.403306961 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.403362989 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.403363943 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.410989046 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.411011934 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.411077976 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.411087990 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.411137104 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.418565989 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.418589115 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.418632984 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.418642044 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.418669939 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.418690920 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.427359104 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.427381992 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.427428961 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.427438021 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.427491903 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.436433077 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.436458111 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.436500072 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.436512947 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.436547995 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.436570883 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.443008900 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.443028927 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.443073988 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.443084955 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.443120956 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.443142891 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.452990055 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.453015089 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.453056097 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.453064919 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.453092098 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.453110933 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.459685087 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.459705114 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.459754944 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.459768057 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.459815979 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.470912933 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.470932007 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.470993996 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.471005917 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.471074104 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.493014097 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.493037939 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.493081093 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.493093014 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.493122101 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.493140936 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.505614996 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.505633116 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.505693913 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.505709887 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.505753994 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.509938002 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.509968996 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.510011911 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.510021925 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.510051966 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.510082006 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.524807930 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.524832964 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.524888039 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.524895906 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.525293112 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.541017056 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.541049957 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.541104078 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.541111946 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.541138887 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.541160107 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.563105106 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.563132048 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.563194036 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.563210964 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.563251972 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.578500986 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.578538895 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.578600883 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.578609943 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.578664064 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.589306116 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.589328051 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.589386940 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.589396954 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.589456081 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.595288038 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.595324993 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.595357895 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.595364094 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.595396996 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.595416069 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.600971937 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.600989103 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.601047039 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.601062059 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.601183891 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.609285116 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.609307051 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.609360933 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.609369040 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.609431982 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.609653950 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.609671116 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.609724045 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.609735966 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.609781027 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.616307974 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.616322994 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.616393089 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.616401911 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.616445065 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.622117996 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.622133970 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.622210026 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.622226954 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.622271061 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.628371954 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.628387928 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.628448963 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.628458977 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.628520012 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.634587049 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.634603977 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.634689093 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.634700060 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.634744883 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.667372942 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.667397022 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.667481899 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.667490005 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.667532921 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.673335075 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.673365116 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.673405886 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.673413038 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.673444033 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.673464060 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.680113077 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.680135965 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.680217028 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.680223942 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.680354118 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.686871052 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.686894894 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.686949968 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.686958075 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.687016010 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.692842960 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.692863941 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.692913055 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.692919970 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.692981005 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.700138092 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.700160027 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.700220108 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.700227022 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.700275898 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.702938080 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.703011990 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.703017950 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.703035116 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.703099966 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.703198910 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.703210115 CET	443	49825	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.703229904 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.703279018 CET	49825	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.793701887 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.793725014 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.793788910 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.793801069 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.793857098 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.798991919 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.799007893 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.799068928 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.799079895 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.799141884 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.805624008 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.805640936 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.805701971 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.805716991 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.805767059 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.813728094 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.813764095 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.813793898 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.813805103 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.813819885 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.813843012 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.813867092 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.814250946 CET	49827	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.814263105 CET	443	49827	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.820089102 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.820125103 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.820785046 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.821351051 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.821365118 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.874485970 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.874531984 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.874680042 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.874963045 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.874975920 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.875601053 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.875637054 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.875705004 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.875927925 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.875941038 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.891450882 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.891480923 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:29.891530991 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.891742945 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:29.891755104 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.473376989 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:30.473421097 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.473572016 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:30.473802090 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:30.473817110 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.482192039 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:30.482225895 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:30.482386112 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:30.483124018 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:30.483139038 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:30.602289915 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:30.603113890 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:30.603147984 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:30.603669882 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:30.603676081 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:30.625250101 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.625538111 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:30.625546932 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.626730919 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.627228022 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:30.627437115 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.627477884 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:30.671344042 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:30.674082994 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.101197004 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.101815939 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.101847887 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.102554083 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.102628946 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.102636099 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.102778912 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.103097916 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.103136063 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.103157997 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.103575945 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.103580952 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.103689909 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.103701115 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.104082108 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.104088068 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.104574919 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.104583979 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.105042934 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.105047941 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.310585022 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.310677052 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.310832977 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.311089993 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.311089993 CET	49833	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.311131954 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.311157942 CET	443	49833	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.316097021 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.316129923 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.316262960 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.316507101 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.316518068 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.416112900 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.458029985 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.466044903 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466056108 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466088057 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466100931 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466110945 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.466123104 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466133118 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466181993 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.466202974 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466263056 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.466269970 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466283083 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.466331005 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.467031956 CET	49834	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.467044115 CET	443	49834	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.554537058 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.554606915 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.554667950 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.555162907 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.555179119 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.555190086 CET	49835	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.555196047 CET	443	49835	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.558207989 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.558284044 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.558348894 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.558515072 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.558515072 CET	49836	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.558537960 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.558547020 CET	443	49836	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.559014082 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.559040070 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.559112072 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.559489012 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.559501886 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.560060978 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.560121059 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.560247898 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.560596943 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.560611963 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.560632944 CET	49837	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.560640097 CET	443	49837	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.561189890 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.561219931 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.561522007 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.561675072 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.561687946 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.562987089 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.563019991 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.563112020 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.563257933 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.563273907 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.564831018 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.564898968 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.564990044 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.565037966 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.565042973 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.565052986 CET	49838	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.565057039 CET	443	49838	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.567023039 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.567032099 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.567091942 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.567202091 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:31.567213058 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:31.680150986 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.680607080 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.680619001 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.681417942 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.681915045 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.681997061 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.682116985 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.716569901 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.717320919 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.717335939 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.717689991 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.718322992 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.718375921 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.718712091 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.723059893 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.723253012 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.723261118 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.723368883 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.724327087 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.724390984 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.725040913 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.725101948 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.725174904 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.759330034 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.771333933 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.775285006 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.775502920 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.775528908 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.776639938 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.777029037 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.777148008 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.777153015 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.777198076 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.779126883 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.779135942 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:31.825994015 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:31.826049089 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.343040943 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.343086004 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.343095064 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.343147993 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.343154907 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.343168974 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.343226910 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.343257904 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.343277931 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.343293905 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.343344927 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.345756054 CET	49842	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.345771074 CET	443	49842	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.346498013 CET	49840	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.346503019 CET	443	49840	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.354909897 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.354933977 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.354993105 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.355493069 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.355506897 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.374099016 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.374140024 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.374226093 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.374480009 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.374495983 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.377227068 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.377281904 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.377329111 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.377352953 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.377367020 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.377397060 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.453869104 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.454142094 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.454159021 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.455208063 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.455271959 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.455821991 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.455881119 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.456063986 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.456070900 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.471884966 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.473412991 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.473481894 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.473491907 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.473499060 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.473550081 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.473846912 CET	49841	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.473855019 CET	443	49841	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.481893063 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.481919050 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.482021093 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.482203007 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.482218981 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.497700930 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.591411114 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.591460943 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.591519117 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.591543913 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.591568947 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.591583014 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.591712952 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.661792994 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.661845922 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.661948919 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.661948919 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.661966085 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.662009001 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.771122932 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.771156073 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.771233082 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.771246910 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.771330118 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.821742058 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.821769953 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.821834087 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.821846008 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.821883917 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.821883917 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.854960918 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.855007887 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.855129004 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.855139971 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.855176926 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.855191946 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.877825022 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.877846956 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.877902985 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.877912045 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.877959013 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.877959013 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.960666895 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.960730076 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.960813046 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.960829020 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.960839987 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.960874081 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.987068892 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.987092972 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.987148046 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:32.987158060 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:32.987224102 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.003293037 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.003357887 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.003442049 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.003442049 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.003452063 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.006267071 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.016398907 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.016422033 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.016505957 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.016515970 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.018331051 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.028563976 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.028603077 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.028629065 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.028647900 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.028690100 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.028690100 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.041513920 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.041555882 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.041616917 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.041624069 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.041656971 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.041656971 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.050579071 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.054491997 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.054539919 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.054588079 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.054598093 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.054631948 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.054631948 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.086220980 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.086324930 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.089423895 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.089432955 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.089667082 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.091784000 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.091829062 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.091835976 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.091949940 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.106134892 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.106729984 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.107347012 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.107368946 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.107831001 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.107836962 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.139337063 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.156883955 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.156956911 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.157001972 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.157025099 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.157063961 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.157063961 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.165852070 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.165899992 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.165942907 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.165954113 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.165990114 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.165990114 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.166002035 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167666912 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167680979 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167716026 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167748928 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167773008 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167776108 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.167776108 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.167789936 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.167804003 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.167815924 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.167855024 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.176311016 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.176367044 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.176415920 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.176426888 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.176450968 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.186966896 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.187009096 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.187071085 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.187082052 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.187091112 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.196569920 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.196623087 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.196650982 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.196662903 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.196700096 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.206016064 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.206123114 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.206165075 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.206183910 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.206253052 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.216006994 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.216052055 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.216085911 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.216093063 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.216135979 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.262396097 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.284769058 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.285348892 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.285362959 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.285887957 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.285892963 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.301585913 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.302016973 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.302037001 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.302464962 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.302473068 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.316068888 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.316097021 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.316149950 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.316159010 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.316188097 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.316288948 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.349324942 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.349370956 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.349442005 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.349452972 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.349463940 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.349503040 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.349509001 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.356672049 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.356726885 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.356756926 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.356766939 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.356815100 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.363008022 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.363053083 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.363100052 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.363110065 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.363146067 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.369460106 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.369508982 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.369524956 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.369533062 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.369565964 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.369661093 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.369762897 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.369874001 CET	49839	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.369900942 CET	443	49839	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.376045942 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.376081944 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.376141071 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.376148939 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.376194954 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.376204967 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.388817072 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.389120102 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.389699936 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.389730930 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.390732050 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.390738010 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.391015053 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.391026974 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.391702890 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.391706944 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.458925962 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.458944082 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.459038019 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.459038019 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.459048986 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.459163904 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.497760057 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.497777939 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.497842073 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.497853994 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.497904062 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.522135019 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.522150040 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.522217035 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.522231102 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.522273064 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.545099020 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.545136929 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.545172930 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.545182943 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.545241117 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.545757055 CET	49844	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.545773029 CET	443	49844	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.551291943 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.551377058 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.551625967 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.552268028 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.552282095 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.552345991 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.552715063 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:33.552728891 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:33.553092003 CET	49846	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.553112030 CET	443	49846	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.559623003 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.559636116 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.559708118 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.559889078 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.559902906 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.725070000 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.725141048 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.725244045 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.725611925 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.725611925 CET	49847	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.725632906 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.725644112 CET	443	49847	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.728770018 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.728797913 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.728986025 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.729208946 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.729224920 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.737803936 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.737879992 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.737955093 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.747068882 CET	49849	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.747097015 CET	443	49849	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.751687050 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.751734018 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.751857042 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.752120972 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.752136946 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.766932964 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.767080069 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.767136097 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.767268896 CET	49845	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:33.767282009 CET	443	49845	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:33.850254059 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.850323915 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.850573063 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.850624084 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.850641012 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.850663900 CET	49850	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.850671053 CET	443	49850	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.853789091 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.853823900 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.853960037 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.854126930 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.854141951 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.867177010 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.867245913 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.867301941 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.867381096 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.867389917 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.867399931 CET	49848	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.867404938 CET	443	49848	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.869630098 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.869661093 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:33.869782925 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.869975090 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:33.869985104 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:34.238280058 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.238596916 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.238610983 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.238982916 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.239339113 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.239398956 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.239485025 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.283360958 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.376672029 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.376997948 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.377023935 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.377424955 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.377794027 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.377856016 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.377937078 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.418782949 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.418800116 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.447643995 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.447968960 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.447978020 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.451030016 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.451093912 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.451534033 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.451611042 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.451704025 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.495358944 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.496915102 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.496928930 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.559330940 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.775504112 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.775544882 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.775600910 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.775604010 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.775654078 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.776227951 CET	49851	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.776237965 CET	443	49851	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.912305117 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.912398100 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.912450075 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.912457943 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:34.912532091 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.913392067 CET	49852	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:34.913402081 CET	443	49852	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.155924082 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.156076908 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.156157017 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.156177044 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.156255007 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.156308889 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.159410000 CET	49853	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.159424067 CET	443	49853	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.363428116 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.363760948 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.363799095 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.364840984 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.364918947 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.365355968 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.365421057 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.365596056 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.365603924 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.418036938 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.508004904 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.510823011 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.510845900 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.511336088 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.511342049 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.573112965 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.573808908 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.573822975 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.575120926 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.575126886 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.599262953 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.599803925 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.599816084 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.600589991 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.600594997 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.717372894 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.718283892 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.718311071 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.719109058 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.719115019 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.782414913 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.783332109 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.783344984 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.784112930 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.784117937 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.885694981 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:35.934298038 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:35.944926023 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.945000887 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.945053101 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.965282917 CET	49857	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.965296984 CET	443	49857	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.982721090 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.982757092 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:35.982856035 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.986500025 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:35.986510992 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.000848055 CET	49795	443	192.168.2.6	150.171.27.10
Nov 25, 2024 16:32:36.012638092 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.012648106 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.012674093 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.012687922 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.012697935 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.012739897 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.012759924 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.012782097 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.012801886 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.021037102 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.021096945 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.021369934 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.040755987 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.040755987 CET	49858	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.040779114 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.040787935 CET	443	49858	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.054455996 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.054532051 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.054686069 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.066036940 CET	49856	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.066051006 CET	443	49856	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.121630907 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.121644020 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.121670961 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.121757030 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.121768951 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.121792078 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.121830940 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.160830021 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.160978079 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.161402941 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.186197996 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.186214924 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.186222076 CET	49855	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.186228037 CET	443	49855	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.190115929 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.190143108 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.190246105 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.193114042 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.193145037 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.193216085 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.193412066 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.193429947 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.196098089 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.196110964 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.196168900 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.196321964 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.196335077 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.196465969 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.196479082 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.200702906 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.200736046 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.200795889 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.200817108 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.200860023 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.200860023 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.251564980 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.251624107 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.251671076 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.292265892 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.292289019 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.292336941 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.292351007 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.292383909 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.292409897 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.318067074 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.318078995 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.318090916 CET	49859	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.318098068 CET	443	49859	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.331011057 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.331032991 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.331146955 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.331165075 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.331176043 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.331248999 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.342525005 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.342559099 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.342633009 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.360644102 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:36.360663891 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:36.438488007 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.438527107 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.438611984 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.438638926 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.438705921 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.491245031 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.491347075 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:36.491398096 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.491480112 CET	49854	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:36.491496086 CET	443	49854	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:37.798165083 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:37.799956083 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:37.799974918 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:37.800523043 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:37.800529003 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.114326954 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.114872932 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.114896059 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.115643024 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.115650892 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.189675093 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.189723015 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.190831900 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.190840006 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.191515923 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.191519976 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.191868067 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.191879988 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.192333937 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.192341089 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.249711037 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.249809980 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.250000000 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.250298977 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.250308037 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.250319004 CET	49860	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.250324011 CET	443	49860	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.253309965 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.253346920 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.253456116 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.253624916 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.253647089 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.312767029 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.313244104 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.313267946 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.313774109 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.313785076 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.555926085 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.556000948 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.556154966 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.556581020 CET	49863	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.556596041 CET	443	49863	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.561896086 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.561954021 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.562036991 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.572804928 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.572827101 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.638442993 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.638509035 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.638565063 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.638813972 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.638822079 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.638854027 CET	49862	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.638858080 CET	443	49862	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.640431881 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.640503883 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.640583992 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.640815973 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.640825987 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.640837908 CET	49861	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.640844107 CET	443	49861	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.642050982 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.642075062 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.642224073 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.642381907 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.642394066 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.643255949 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.643294096 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.643353939 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.643507957 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.643523932 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.782253027 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.782320023 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.782466888 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.782685995 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.782685995 CET	49864	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.782716036 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.782727003 CET	443	49864	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.785931110 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.785968065 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:38.786035061 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.786290884 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:38.786303997 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.054928064 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:40.054965019 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:40.055047035 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:40.055262089 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:40.055274010 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:40.057540894 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:40.057596922 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:40.057662964 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:40.059427977 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:40.059439898 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:40.184926987 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.185683012 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.185699940 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.186418056 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.186423063 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.307559013 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.310529947 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.310555935 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.311433077 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.311439037 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.434715986 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.436254978 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.436280966 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.437123060 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.437129021 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.457221031 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.457707882 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.457731962 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.458278894 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.458285093 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.642402887 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.643299103 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.643323898 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.644251108 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.644258022 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.647213936 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.647285938 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.647392035 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.647635937 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.647658110 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.647674084 CET	49865	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.647687912 CET	443	49865	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.651002884 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.651062012 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.651253939 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.651474953 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.651504040 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.760557890 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.760581970 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.760658026 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.760673046 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.760987043 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.760999918 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.761032104 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.761142969 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.761168957 CET	443	49866	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.761231899 CET	49866	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.765563011 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.765607119 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.766205072 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.766206026 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.766232014 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.890897036 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.890981913 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.891149044 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.891338110 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.891338110 CET	49867	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.891350031 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.891360044 CET	443	49867	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.894774914 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.894814014 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.894886971 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.895066977 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.895081997 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.910089970 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.910149097 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.910195112 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.910394907 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.910413027 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.910423994 CET	49868	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.910429955 CET	443	49868	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.913589954 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.913613081 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:40.913683891 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.913855076 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:40.913861990 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.102889061 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.102910995 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.102997065 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.103013039 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.103333950 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.103344917 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.103373051 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.103471994 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.103502989 CET	443	49869	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.103557110 CET	49869	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.108294964 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.108345985 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.108648062 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.108803034 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:41.108822107 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:41.855155945 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.862710953 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:41.862723112 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.863209009 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.866756916 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:41.866827011 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.868942976 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:41.911329031 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.952905893 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.953185081 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:41.953193903 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.953592062 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.953932047 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:41.954014063 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.954065084 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:41.995337009 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:41.996809959 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.386097908 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.386162043 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.386230946 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.386276007 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.386297941 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.388046026 CET	49872	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.388067961 CET	443	49872	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.400986910 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.401034117 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.401165009 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.401757956 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.401767969 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.437978029 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.438617945 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.438638926 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.439131021 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.439136028 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.484047890 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.484374046 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.484440088 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.484438896 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.484488964 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.485030890 CET	49870	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.485044956 CET	443	49870	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.488282919 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.488315105 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.488435030 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.488657951 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:42.488667965 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:42.518392086 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.519032955 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.519061089 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.519506931 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.519512892 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.676209927 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.677392006 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.677392006 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.677422047 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.677434921 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.887501955 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.887522936 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.887574911 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.887583971 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.887640953 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.888875008 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.888875008 CET	49873	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.888895035 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.888904095 CET	443	49873	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.892507076 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.892551899 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.892616034 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.892828941 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.892844915 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.971360922 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.971467018 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.971491098 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.971558094 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.971574068 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.971919060 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.971931934 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.971946001 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.971999884 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.972017050 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.972069979 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.972096920 CET	443	49874	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.972153902 CET	49874	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.972897053 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.972907066 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.974889994 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.974925995 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:42.975058079 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.975219011 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:42.975236893 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.090792894 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.092125893 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.092154026 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.092644930 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.092653036 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.119777918 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.122984886 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.123114109 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.123198032 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.123198032 CET	49875	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.123218060 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.123233080 CET	443	49875	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.126452923 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.126491070 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.126771927 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.126949072 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.126960993 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.420145035 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.426172018 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.426279068 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.427522898 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.427547932 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.427561045 CET	49876	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.427567959 CET	443	49876	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.433291912 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.433317900 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.433410883 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.443270922 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.443284988 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.540462971 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.543121099 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.543231964 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.543443918 CET	49877	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.543459892 CET	443	49877	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.547424078 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.547470093 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:43.547703981 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.547831059 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:43.547842979 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.240557909 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.246295929 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.246316910 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.246702909 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.257338047 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.257399082 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.257500887 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.299329996 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.340101957 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.349360943 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.349376917 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.349725962 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.361284971 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.361361027 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.361496925 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.403331041 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.768991947 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.773211002 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:44.773235083 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.776073933 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:44.776079893 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.797646999 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.797693968 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.797754049 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.797811031 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.798526049 CET	49878	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.798551083 CET	443	49878	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.799865007 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.800477028 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:44.800504923 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.801125050 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:44.801131010 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.868645906 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.868748903 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.868860006 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.868864059 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.868942022 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.869688034 CET	49880	443	192.168.2.6	152.199.21.175
Nov 25, 2024 16:32:44.869698048 CET	443	49880	152.199.21.175	192.168.2.6
Nov 25, 2024 16:32:44.939529896 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.940156937 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:44.940185070 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:44.940666914 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:44.940673113 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.292839050 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.295958042 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.296191931 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.296252012 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.296272039 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.296283007 CET	49882	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.296289921 CET	443	49882	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.299613953 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.299658060 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.299760103 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.299958944 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.299978018 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.311510086 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.315301895 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.315367937 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.315483093 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.315483093 CET	49881	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.315491915 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.315500975 CET	443	49881	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.318015099 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.318044901 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.318159103 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.318326950 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.318341017 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.383766890 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.383874893 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.384363890 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.384385109 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.384915113 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.384918928 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.387377977 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.387495995 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.387533903 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.387548923 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.387558937 CET	49883	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.387563944 CET	443	49883	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.390635014 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.390667915 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.390784025 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.390887976 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.390897036 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.419116020 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.419959068 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.419991016 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.420784950 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.420794010 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.829646111 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.834980965 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.835046053 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.835098028 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.835109949 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.835138083 CET	49884	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.835145950 CET	443	49884	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.838742018 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.838781118 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.838857889 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.839057922 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.839082003 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.875762939 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.879587889 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.879659891 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.879722118 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.879728079 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.879761934 CET	49885	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.879766941 CET	443	49885	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.883794069 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.883846045 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:45.883982897 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.884203911 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:45.884222031 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.135723114 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.136332035 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.136347055 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.136934042 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.136940956 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.141998053 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.142461061 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.142474890 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.142988920 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.142993927 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.153117895 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.153654099 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.153687000 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.154109001 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.154117107 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.604999065 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.605072021 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.605207920 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.605530977 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.605530977 CET	49889	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.605556965 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.605567932 CET	443	49889	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.610770941 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.610827923 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.610905886 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.611095905 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.611114979 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.614329100 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.614447117 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.614567041 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.614625931 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.614649057 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.614665985 CET	49888	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.614670038 CET	443	49888	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.617415905 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.617464066 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.617527008 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.617697954 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.617713928 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.623747110 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.626960039 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.627015114 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.627058029 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.627072096 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.627085924 CET	49887	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.627091885 CET	443	49887	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.629422903 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.629441023 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.629638910 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.629786968 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.629801035 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.827963114 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.828505993 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.828628063 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.828636885 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.829055071 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.829080105 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.829272032 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.829277039 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:47.829617977 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:47.829624891 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.496917009 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.496963024 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.496990919 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.497014999 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.497056961 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.497090101 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.497188091 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.497498035 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.507488966 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.507519007 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.507586002 CET	49890	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.507592916 CET	443	49890	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.509222984 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.509239912 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.509296894 CET	49891	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.509304047 CET	443	49891	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.512360096 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.512397051 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.512494087 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.513561010 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.513571978 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.513676882 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.514077902 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.514094114 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:48.514185905 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:48.514198065 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.341289997 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.341867924 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.341897011 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.342463970 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.342469931 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.378483057 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.379096031 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.379132986 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.379661083 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.379668951 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.496941090 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.505831003 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.505852938 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.506592035 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.506597996 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.759978056 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:49.760023117 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:49.760263920 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:49.760749102 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:49.760763884 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:49.781287909 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.784157991 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.784229994 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.784281015 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.784298897 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.784312010 CET	49893	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.784317970 CET	443	49893	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.787440062 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.787487984 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.787559032 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.787731886 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.787744045 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.836721897 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.839997053 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.840054989 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.840162992 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.840162992 CET	49894	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.840183973 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.840202093 CET	443	49894	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.842592001 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.842622995 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.842741013 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.842861891 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.842875957 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.951184034 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.954411030 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.954462051 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.954480886 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.954530001 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.954603910 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.954615116 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.954641104 CET	49892	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.954648018 CET	443	49892	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.957757950 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.957803011 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:49.957879066 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.958074093 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:49.958090067 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.435406923 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.435995102 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.436029911 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.436515093 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.436520100 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.442913055 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.443434000 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.443456888 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.443909883 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.443916082 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.909734011 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.912900925 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.912971020 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.912974119 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.913032055 CET	49895	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.913050890 CET	443	49895	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.916146040 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.916225910 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.916237116 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916301966 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916344881 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916363955 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.916374922 CET	49896	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916379929 CET	443	49896	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.916534901 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916578054 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.916824102 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916966915 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.916982889 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.918881893 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.918914080 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:50.918982029 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.919260979 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:50.919275045 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.536819935 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:51.536941051 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:51.539132118 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.572359085 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:51.572400093 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:51.572674036 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:51.579862118 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:51.579884052 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.587109089 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:51.587117910 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.621262074 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:51.653290987 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.655867100 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:51.660588026 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:51.660619020 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.661101103 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:51.661124945 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.679779053 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.680300951 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:51.680315971 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.680772066 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:51.680778027 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:51.692873001 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:51.692907095 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:51.693018913 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:51.693625927 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:51.693640947 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:51.699335098 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.000674963 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.003824949 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.003885984 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.003977060 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.003993988 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.004008055 CET	49898	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.004014969 CET	443	49898	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.008758068 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.008804083 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.008866072 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.009207010 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.009231091 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.102091074 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.105273962 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.105334044 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.105540037 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.105561018 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.105571985 CET	49899	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.105577946 CET	443	49899	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.109889030 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.109914064 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.109981060 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.110207081 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.110224962 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.119039059 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.119251966 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.119328022 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.119498014 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.119498014 CET	49900	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.119534969 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.119563103 CET	443	49900	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.122360945 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.122404099 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.122468948 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.122729063 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.122744083 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.239676952 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.239707947 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.239715099 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.239725113 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.239754915 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.239768028 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.239799023 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.239835978 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.239857912 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.285033941 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.285074949 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.285104990 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.285126925 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.285137892 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.285155058 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.285178900 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.285465956 CET	49897	443	192.168.2.6	4.245.163.56
Nov 25, 2024 16:32:52.285480976 CET	443	49897	4.245.163.56	192.168.2.6
Nov 25, 2024 16:32:52.645314932 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.646055937 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.646080017 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.646965027 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.646970034 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.705207109 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:52.705244064 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:52.705351114 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:52.705977917 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:52.706075907 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:52.706185102 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:52.709522009 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:52.709537983 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:52.709822893 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:52.709840059 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:52.781681061 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.782259941 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.782290936 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:52.782855034 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:52.782861948 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.080517054 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.083738089 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.083852053 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.083852053 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.083875895 CET	49902	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.083888054 CET	443	49902	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.087172031 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.087193012 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.087279081 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.087447882 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.087454081 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.235443115 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.238816977 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.238873005 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.238897085 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.238936901 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.239032030 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.239032030 CET	49901	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.239053965 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.239064932 CET	443	49901	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.242273092 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.242300034 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.242463112 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.242621899 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.242644072 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.739116907 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.740196943 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.740196943 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.740217924 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.740227938 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.901791096 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.902434111 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.902456999 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:53.902983904 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:53.902991056 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.010266066 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.010857105 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.010881901 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.011487007 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.011493921 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.026731014 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.026822090 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.030232906 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.030242920 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.030502081 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.033071995 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.033269882 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.033276081 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.038570881 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.079341888 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.175056934 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.178142071 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.178193092 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.178236008 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.178271055 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.178369045 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.178369045 CET	49904	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.178388119 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.178391933 CET	443	49904	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.181440115 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.181468010 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.181540012 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.181685925 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.181694984 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.453282118 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.453377008 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.453509092 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.453658104 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.458058119 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.458087921 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.458328009 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.458333969 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.458350897 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.458406925 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.458600998 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.458679914 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.463133097 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.463165045 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.463335037 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.463377953 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.478926897 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.482053041 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.482189894 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.482251883 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.482265949 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.482276917 CET	49906	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.482284069 CET	443	49906	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.485562086 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.485589027 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.485696077 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.485833883 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.485855103 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.493746996 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.496941090 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.497006893 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.497334957 CET	49905	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.497349977 CET	443	49905	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.500994921 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.501036882 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.501190901 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.501378059 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.501391888 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.725219011 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.725311041 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.725404978 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.726820946 CET	49903	443	192.168.2.6	20.198.119.84
Nov 25, 2024 16:32:54.726845026 CET	443	49903	20.198.119.84	192.168.2.6
Nov 25, 2024 16:32:54.833192110 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.834121943 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.834140062 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.835123062 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:54.835130930 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:54.860645056 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.860666990 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.860740900 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:54.860806942 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.860807896 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.860807896 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.863270044 CET	49907	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:54.863287926 CET	443	49907	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:55.028764963 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:55.028785944 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:55.028844118 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:55.028875113 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:55.028896093 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:55.028901100 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:55.028923988 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:55.028948069 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:55.031848907 CET	49908	443	192.168.2.6	20.223.35.26
Nov 25, 2024 16:32:55.031866074 CET	443	49908	20.223.35.26	192.168.2.6
Nov 25, 2024 16:32:55.093480110 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.093954086 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.093985081 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.094532967 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.094542027 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.276676893 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.280000925 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.280121088 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.280189037 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.280214071 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.280230999 CET	49909	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.280239105 CET	443	49909	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.283339024 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.283382893 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.283457994 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.283646107 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.283663034 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.550668955 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.553778887 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.553828955 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.553836107 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.553888083 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.553946018 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.553970098 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.553983927 CET	49910	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.553992033 CET	443	49910	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.557246923 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.557276964 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.557526112 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.557744980 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.557759047 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.974128962 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.974750042 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.974771023 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:55.975234985 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:55.975241899 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.213680983 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.214273930 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.214292049 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.214787960 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.214792967 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.285022020 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.285617113 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.285634041 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.286065102 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.286081076 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.437861919 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.441445112 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.441526890 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.445966959 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.445993900 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.446012974 CET	49911	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.446019888 CET	443	49911	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.450931072 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.450978994 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.451049089 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.451728106 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.451742887 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.659296989 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.662440062 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.662527084 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.662573099 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.662586927 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.662605047 CET	49912	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.662619114 CET	443	49912	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.665841103 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.665887117 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.666045904 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.666258097 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.666275978 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.734086037 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.735424042 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.735603094 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.735678911 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.735678911 CET	49913	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.735694885 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.735703945 CET	443	49913	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.739183903 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.739233017 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:56.739473104 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.739666939 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:56.739684105 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.138921976 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.139717102 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.139740944 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.140351057 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.140357018 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.279769897 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.280399084 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.280417919 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.280842066 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.280860901 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.601948977 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.605048895 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.605146885 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.605163097 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.605184078 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.605252981 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.605323076 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.605338097 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.605349064 CET	49914	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.605355024 CET	443	49914	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.608923912 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.608998060 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:57.609114885 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.609282970 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:57.609304905 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:58.673535109 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:58.673629999 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:58.673903942 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:58.673903942 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:58.674002886 CET	49915	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:58.674021006 CET	443	49915	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:58.677124023 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:58.677167892 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:58.677360058 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:58.677489042 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:58.677505016 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.091502905 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.092091084 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.092127085 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.092147112 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.092485905 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.092498064 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.092580080 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.092586994 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.092775106 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.092942953 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.092952013 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.093154907 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.093174934 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.093651056 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.093656063 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.527096987 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.527292967 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.530666113 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.530719042 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.530720949 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.530765057 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.530987978 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.531006098 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.531016111 CET	49918	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.531022072 CET	443	49918	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.531449080 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.531512976 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.533150911 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.533154964 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.533164978 CET	49916	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.533168077 CET	443	49916	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.535190105 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.537404060 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.537456036 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.537606955 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538336039 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.538446903 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538585901 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538626909 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.538687944 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538810015 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538827896 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.538866997 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538866997 CET	49917	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.538885117 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.538889885 CET	443	49917	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.540863037 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.540875912 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.542829990 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.542845964 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:32:59.542956114 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.543122053 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:32:59.543138027 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.407624006 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.408226967 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.408266068 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.408705950 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.408723116 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.672574997 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.673240900 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.673264980 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.673835993 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.673841000 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.863207102 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.863393068 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.863472939 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.863629103 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.863660097 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.863687992 CET	49919	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.863703966 CET	443	49919	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.866859913 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.866909981 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:00.866969109 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.867121935 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:00.867137909 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.142563105 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.147900105 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.147964001 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.148077965 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.148077965 CET	49920	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.148096085 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.148099899 CET	443	49920	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.151123047 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.151170969 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.151463032 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.151644945 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.151663065 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.368976116 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.369597912 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.369630098 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.370182037 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.370189905 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.433495998 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.434256077 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.434269905 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.434765100 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.434771061 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.453043938 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.453638077 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.453670025 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.454118967 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.454128981 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.828434944 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.828489065 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.828555107 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.828852892 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.828862906 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.828871965 CET	49923	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.828879118 CET	443	49923	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.832170010 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.832180977 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.832269907 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.832482100 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.832492113 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.889430046 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.892715931 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.892770052 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.892853022 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.892904997 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.892925024 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.892939091 CET	49921	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.892946005 CET	443	49921	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.896128893 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.896169901 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.896281004 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.896469116 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.896485090 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.921216011 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.921277046 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.921370983 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.921614885 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.921614885 CET	49922	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.921658039 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.921686888 CET	443	49922	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.925200939 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.925234079 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:01.925333023 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.925652027 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:01.925664902 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:02.591042042 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:02.591576099 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:02.591598988 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:02.592320919 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:02.592327118 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:02.939543962 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:02.940119028 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:02.940150976 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:02.940695047 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:02.940702915 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.047746897 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.047781944 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.047842026 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.047844887 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.047894001 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.048165083 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.048181057 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.048192024 CET	49925	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.048197985 CET	443	49925	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.051775932 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.051815987 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.052031040 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.052265882 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.052278042 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.393990993 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.397088051 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.397217989 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.397438049 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.397458076 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.397475958 CET	49926	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.397483110 CET	443	49926	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.402162075 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.402192116 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.402287960 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.402437925 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.402452946 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.679095984 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.679657936 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.679672956 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.680149078 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.680154085 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.683243990 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.683578014 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.683602095 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.683923960 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.683931112 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.965765953 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.966799021 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.966810942 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:03.967811108 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:03.967818022 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.126647949 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.130057096 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.130119085 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.130201101 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.130218029 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.130228043 CET	49928	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.130239010 CET	443	49928	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.133948088 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.133996010 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.134253025 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.134495974 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.134512901 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.136457920 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.140278101 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.140337944 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.140341043 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.140402079 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.140477896 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.140494108 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.140508890 CET	49927	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.140513897 CET	443	49927	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.143680096 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.143726110 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.144079924 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.144251108 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.144264936 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.404504061 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:04.404552937 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:04.404670000 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:04.405184984 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:04.405198097 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:04.420316935 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.423614979 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.423659086 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.423685074 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.423712015 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.423793077 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.423799038 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.423928022 CET	49929	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.423933029 CET	443	49929	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.426939011 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.426969051 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.427038908 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.427254915 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.427267075 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.912347078 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.912975073 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.912993908 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:04.913573027 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:04.913579941 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.263432980 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.264004946 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.264030933 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.264497995 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.264503002 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.368010044 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.371566057 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.371655941 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.373696089 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.373702049 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.373718977 CET	49930	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.373723030 CET	443	49930	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.383810997 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.383852005 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.383941889 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.384108067 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.384120941 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.862943888 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.863051891 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.863106012 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.863229990 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.863421917 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.863421917 CET	49931	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.863439083 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.863451958 CET	443	49931	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.866749048 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.866790056 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:05.867012024 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.867229939 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:05.867247105 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.066435099 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.067028999 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.067058086 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.067550898 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.067559004 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.085056067 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.085596085 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.085624933 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.086117983 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.086128950 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.155628920 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:06.155962944 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:06.155997992 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:06.156869888 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:06.157381058 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:06.157473087 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:06.199331999 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:06.276783943 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.277409077 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.277441025 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.278141975 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.278151035 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.515249014 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.518440008 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.518512964 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.518608093 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.518608093 CET	49933	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.518652916 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.518702984 CET	443	49933	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.521994114 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.522033930 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.522145987 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.522264957 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.522277117 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.539707899 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.543143988 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.543225050 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.543277979 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.543301105 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.543323994 CET	49932	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.543329000 CET	443	49932	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.549653053 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.549690962 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.549834013 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.550026894 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.550041914 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.746994019 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.750080109 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.750169992 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.750260115 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.750260115 CET	49935	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.750305891 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.750320911 CET	443	49935	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.763034105 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.763092041 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:06.763209105 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.763715982 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:06.763748884 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:07.962080956 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:07.962619066 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:07.962639093 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:07.963114977 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:07.963121891 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:07.982681036 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:07.983170033 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:07.983181953 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:07.983612061 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:07.983618021 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.249953985 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.250770092 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.250793934 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.252053976 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.252059937 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.404719114 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.407506943 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.409142971 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.414089918 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.432867050 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.435669899 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.435786963 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.435894966 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.465677023 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.473486900 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.473486900 CET	49937	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.473512888 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.473525047 CET	443	49937	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.477693081 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.477693081 CET	49936	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.477713108 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.477724075 CET	443	49936	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.479118109 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.479127884 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.479557991 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.479566097 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.582592964 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.582643986 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.582736969 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.600338936 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.600357056 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.610001087 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.610104084 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.610177040 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.610431910 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.610457897 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.763214111 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.766421080 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.766477108 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.766484022 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.766551018 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.766628981 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.766649961 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.766663074 CET	49938	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.766669035 CET	443	49938	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.769953966 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.769987106 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.770044088 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.770227909 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.770242929 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.868168116 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.871562004 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.871640921 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.871691942 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.871707916 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.871717930 CET	49939	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.871723890 CET	443	49939	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.875432014 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.875478983 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:08.875559092 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.875750065 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:08.875765085 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.066118002 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.066694975 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.066740036 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.067255974 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.067265987 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.511415958 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.516702890 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.516808987 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.516908884 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.516932964 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.516946077 CET	49940	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.516952991 CET	443	49940	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.522733927 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.522785902 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:09.522970915 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.523169041 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:09.523181915 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.401757956 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.402414083 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.402439117 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.402997971 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.403013945 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.422082901 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.423091888 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.423093081 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.423121929 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.423134089 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.486749887 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.487763882 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.487763882 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.487791061 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.487807035 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.686505079 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.687146902 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.687176943 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.687832117 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.687839031 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.861434937 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.864589930 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.864687920 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.864737034 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.864753008 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.864777088 CET	49941	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.864785910 CET	443	49941	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.867744923 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.867798090 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.868195057 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.868700027 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.868717909 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.869395971 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.872931004 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.872987032 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.873020887 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.873059034 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.873191118 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.873203039 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.873226881 CET	49942	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.873233080 CET	443	49942	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.875977993 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.876024008 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.876154900 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.876358986 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.876374960 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.950577021 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.953653097 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.953787088 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.964023113 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.964046955 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:10.964061022 CET	49943	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:10.964066029 CET	443	49943	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.036341906 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.036389112 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.036587000 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.036834002 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.036854029 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.134042978 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.137358904 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.137408972 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.137448072 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.137494087 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.139126062 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.139156103 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.139173985 CET	49944	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.139183044 CET	443	49944	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.168231964 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.168284893 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.168384075 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.172338963 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.172355890 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.392865896 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.393661022 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.393698931 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.394263029 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.394268036 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.847259045 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.850431919 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.850550890 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.850586891 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.850603104 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.850615025 CET	49945	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.850620031 CET	443	49945	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.853653908 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.853705883 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:11.853847980 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.854034901 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:11.854053974 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.680447102 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.681061029 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:12.681093931 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.681572914 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:12.681581020 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.718549967 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.719096899 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:12.719115973 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.719594955 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:12.719602108 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.790025949 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.790649891 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:12.790672064 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:12.791214943 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:12.791220903 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.341679096 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.342483997 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.342534065 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.343274117 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.343281031 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.537820101 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.542211056 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.542268991 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.542354107 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.542366028 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.542380095 CET	49948	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.542386055 CET	443	49948	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.544543982 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.544688940 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.545623064 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.545675039 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.545747995 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.545917034 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.545949936 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.547669888 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.547724962 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.547774076 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.547786951 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.547800064 CET	49946	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.547805071 CET	443	49946	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.548218966 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.548276901 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.548440933 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.548450947 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.548460007 CET	49947	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.548464060 CET	443	49947	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.550529003 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.550546885 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.550611019 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.550827026 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.550837994 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.550957918 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.550970078 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.551033974 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.551136017 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.551147938 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.777076960 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.780175924 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.780265093 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.780363083 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.780363083 CET	49949	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.780410051 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.780443907 CET	443	49949	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.783534050 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.783571959 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.783746004 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.783948898 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.783961058 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.850105047 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.850707054 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.850727081 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:13.851243019 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:13.851248980 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:14.287632942 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:14.290906906 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:14.291064024 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:14.291064024 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:14.291129112 CET	49950	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:14.291146994 CET	443	49950	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:14.296041965 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:14.296089888 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:14.296236038 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:14.296442032 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:14.296467066 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.338159084 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.338751078 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.338849068 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.339524031 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.339540005 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.404495001 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.405142069 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.405152082 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.405563116 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.405567884 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.405580044 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.406061888 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.406085968 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.406641960 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.406646967 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.669894934 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.670481920 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.670490026 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.671189070 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.671192884 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.839948893 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:15.840130091 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:15.840178967 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:15.905826092 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.908910990 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.909054995 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.909143925 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.909143925 CET	49951	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.909192085 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.909219980 CET	443	49951	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.912347078 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.912384033 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.912478924 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.912693977 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.912707090 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.916167021 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.918229103 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.919122934 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.919235945 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.919300079 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.919300079 CET	49953	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.919306040 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.919320107 CET	443	49953	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.921407938 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.921462059 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.921494007 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.921538115 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.922075987 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.922082901 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.922096014 CET	49952	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.922102928 CET	443	49952	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.923325062 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.923357010 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.923443079 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.923655987 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.923671007 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.926206112 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.926234961 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:15.926342964 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.926505089 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:15.926521063 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.091119051 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.091695070 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.091706991 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.092411041 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.092416048 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.123215914 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.128324986 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.128451109 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.128818035 CET	49954	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.128825903 CET	443	49954	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.133213997 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.133239031 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.133301973 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.133423090 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.133438110 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.630481005 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.630559921 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.630867004 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.630984068 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.630984068 CET	49955	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.631000042 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.631010056 CET	443	49955	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.634527922 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.634576082 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.634675026 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.634916067 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:16.634931087 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:16.763489008 CET	49934	443	192.168.2.6	172.217.21.36
Nov 25, 2024 16:33:16.763503075 CET	443	49934	172.217.21.36	192.168.2.6
Nov 25, 2024 16:33:17.641896009 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.642555952 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.642591000 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.643109083 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.643125057 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.807455063 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.808824062 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.808824062 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.808888912 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.808914900 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.809473991 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.809885979 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.809897900 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.810559034 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.810564041 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.922452927 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.923569918 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.923569918 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:17.923579931 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:17.923593998 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.157300949 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.157325983 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.157397985 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.157433987 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.157537937 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.157589912 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.157792091 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.157792091 CET	49956	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.157812119 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.157835960 CET	443	49956	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.161204100 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.161246061 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.161324024 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.161513090 CET	49961	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.161528111 CET	443	49961	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.263448954 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.266602039 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.266655922 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.266664982 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.266737938 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.266817093 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.266855955 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.266880989 CET	49958	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.266897917 CET	443	49958	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.270726919 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.270768881 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.270859003 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.271080971 CET	49962	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.271094084 CET	443	49962	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.278326988 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.281688929 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.281761885 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.281764984 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.281819105 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.281908989 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.281922102 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.281960011 CET	49957	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.281965971 CET	443	49957	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.284846067 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.284878016 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.284970045 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.285228014 CET	49963	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.285239935 CET	443	49963	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.366974115 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.370733976 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.370873928 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.370929956 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.370935917 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.370959044 CET	49959	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.370964050 CET	443	49959	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.374532938 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.374566078 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.374624014 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.374867916 CET	49964	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.374876022 CET	443	49964	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.524017096 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.524645090 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.524679899 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.525310040 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.525317907 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.987241030 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.990546942 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.990598917 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.990607023 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.990674973 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.990797997 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.990797997 CET	49960	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.990818024 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.990828037 CET	443	49960	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.994122028 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.994174004 CET	443	49965	13.107.246.63	192.168.2.6
Nov 25, 2024 16:33:18.994294882 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.994601965 CET	49965	443	192.168.2.6	13.107.246.63
Nov 25, 2024 16:33:18.994617939 CET	443	49965	13.107.246.63	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 16:32:00.412343025 CET	53	52709	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:00.614268064 CET	53	54014	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:01.729465961 CET	50776	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:01.729664087 CET	51231	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:02.055464029 CET	53	50776	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:02.056518078 CET	53	51231	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:03.722039938 CET	53	54772	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:04.341799021 CET	58954	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:04.342057943 CET	63880	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:04.482939959 CET	53	58954	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:04.484311104 CET	53	63880	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:04.893424034 CET	54806	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:04.893960953 CET	51554	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:12.902900934 CET	54098	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:12.903506041 CET	55702	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:21.047357082 CET	53	56646	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:22.056432009 CET	61431	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:22.057048082 CET	63232	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:22.223653078 CET	61242	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:22.223653078 CET	64506	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:22.362745047 CET	53	64506	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:22.362824917 CET	53	61242	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:25.527621031 CET	61897	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:25.527916908 CET	60464	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:25.665184975 CET	53	61897	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:25.667635918 CET	53	60464	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:30.111368895 CET	53	57586	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:40.059135914 CET	53	60181	1.1.1.1	192.168.2.6
Nov 25, 2024 16:32:43.347002983 CET	50914	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:32:43.347394943 CET	51817	53	192.168.2.6	1.1.1.1
Nov 25, 2024 16:33:00.247447968 CET	53	49172	1.1.1.1	192.168.2.6
Nov 25, 2024 16:33:02.840372086 CET	53	60738	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 25, 2024 16:32:43.711746931 CET	192.168.2.6	1.1.1.1	c29e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 16:32:01.729465961 CET	192.168.2.6	1.1.1.1	0xf36b	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:01.729664087 CET	192.168.2.6	1.1.1.1	0x472b	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:04.341799021 CET	192.168.2.6	1.1.1.1	0xeb5d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:04.342057943 CET	192.168.2.6	1.1.1.1	0xd8c2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:04.893424034 CET	192.168.2.6	1.1.1.1	0x242e	Standard query (0)	bizcreditservices.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:04.893960953 CET	192.168.2.6	1.1.1.1	0x33f6	Standard query (0)	bizcreditservices.sharepoint.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:12.902900934 CET	192.168.2.6	1.1.1.1	0xe44a	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:12.903506041 CET	192.168.2.6	1.1.1.1	0x2b62	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Nov 25, 2024 16:32:22.056432009 CET	192.168.2.6	1.1.1.1	0xa920	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:22.057048082 CET	192.168.2.6	1.1.1.1	0x8f94	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 25, 2024 16:32:22.223653078 CET	192.168.2.6	1.1.1.1	0xd4	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:22.223653078 CET	192.168.2.6	1.1.1.1	0x8044	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 25, 2024 16:32:25.527621031 CET	192.168.2.6	1.1.1.1	0xc010	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:25.527916908 CET	192.168.2.6	1.1.1.1	0xe25b	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 25, 2024 16:32:43.347002983 CET	192.168.2.6	1.1.1.1	0xbeb8	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:43.347394943 CET	192.168.2.6	1.1.1.1	0xf74a	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 16:32:02.055464029 CET	1.1.1.1	192.168.2.6	0xf36b	No error (0)	url.us.m.mimecastprotect.com		207.211.31.106	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:02.055464029 CET	1.1.1.1	192.168.2.6	0xf36b	No error (0)	url.us.m.mimecastprotect.com		205.139.111.113	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:02.055464029 CET	1.1.1.1	192.168.2.6	0xf36b	No error (0)	url.us.m.mimecastprotect.com		205.139.111.12	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:02.055464029 CET	1.1.1.1	192.168.2.6	0xf36b	No error (0)	url.us.m.mimecastprotect.com		207.211.31.64	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:02.055464029 CET	1.1.1.1	192.168.2.6	0xf36b	No error (0)	url.us.m.mimecastprotect.com		207.211.31.113	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:02.055464029 CET	1.1.1.1	192.168.2.6	0xf36b	No error (0)	url.us.m.mimecastprotect.com		205.139.111.117	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:04.482939959 CET	1.1.1.1	192.168.2.6	0xeb5d	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:04.484311104 CET	1.1.1.1	192.168.2.6	0xd8c2	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 16:32:05.573718071 CET	1.1.1.1	192.168.2.6	0x33f6	No error (0)	bizcreditservices.sharepoint.com	11301-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.573718071 CET	1.1.1.1	192.168.2.6	0x33f6	No error (0)	11301-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193319-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.573718071 CET	1.1.1.1	192.168.2.6	0x33f6	No error (0)	193319-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193319-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.826904058 CET	1.1.1.1	192.168.2.6	0x242e	No error (0)	bizcreditservices.sharepoint.com	11301-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.826904058 CET	1.1.1.1	192.168.2.6	0x242e	No error (0)	11301-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193319-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.826904058 CET	1.1.1.1	192.168.2.6	0x242e	No error (0)	193319-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193319-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.826904058 CET	1.1.1.1	192.168.2.6	0x242e	No error (0)	193319-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:05.826904058 CET	1.1.1.1	192.168.2.6	0x242e	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:05.826904058 CET	1.1.1.1	192.168.2.6	0x242e	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:13.049093962 CET	1.1.1.1	192.168.2.6	0xe44a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:13.049211979 CET	1.1.1.1	192.168.2.6	0x2b62	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:16.250190020 CET	1.1.1.1	192.168.2.6	0x4744	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:16.250190020 CET	1.1.1.1	192.168.2.6	0x4744	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:18.836349010 CET	1.1.1.1	192.168.2.6	0x81a	No error (0)	g-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:18.836349010 CET	1.1.1.1	192.168.2.6	0x81a	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:18.836349010 CET	1.1.1.1	192.168.2.6	0x81a	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:19.531919003 CET	1.1.1.1	192.168.2.6	0xefb4	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:19.531919003 CET	1.1.1.1	192.168.2.6	0xefb4	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:22.195624113 CET	1.1.1.1	192.168.2.6	0xa920	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:22.195935965 CET	1.1.1.1	192.168.2.6	0x8f94	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:22.362745047 CET	1.1.1.1	192.168.2.6	0x8044	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:22.362745047 CET	1.1.1.1	192.168.2.6	0x8044	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:22.362824917 CET	1.1.1.1	192.168.2.6	0xd4	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:22.362824917 CET	1.1.1.1	192.168.2.6	0xd4	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:22.362824917 CET	1.1.1.1	192.168.2.6	0xd4	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:25.665184975 CET	1.1.1.1	192.168.2.6	0xc010	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:25.665184975 CET	1.1.1.1	192.168.2.6	0xc010	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:25.665184975 CET	1.1.1.1	192.168.2.6	0xc010	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:25.667635918 CET	1.1.1.1	192.168.2.6	0xe25b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:25.667635918 CET	1.1.1.1	192.168.2.6	0xe25b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:36.178113937 CET	1.1.1.1	192.168.2.6	0xb972	No error (0)	g-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:36.178113937 CET	1.1.1.1	192.168.2.6	0xb972	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:36.178113937 CET	1.1.1.1	192.168.2.6	0xb972	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:42.474611998 CET	1.1.1.1	192.168.2.6	0x21f0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:42.474611998 CET	1.1.1.1	192.168.2.6	0x21f0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 25, 2024 16:32:43.611475945 CET	1.1.1.1	192.168.2.6	0xbeb8	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 16:32:43.711551905 CET	1.1.1.1	192.168.2.6	0xf74a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

url.us.m.mimecastprotect.com

arc.msn.com

bizcreditservices.sharepoint.com

fs.microsoft.com

tse1.mm.bing.net

slscr.update.microsoft.com

www.bing.com

https:

aadcdn.msauth.net

aadcdn.msftauth.net

g.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49714	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:31:56 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 64 2b 74 41 75 6d 79 53 52 55 6d 6a 56 77 6d 46 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 37 33 31 35 37 32 61 35 36 38 36 66 64 38 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: d+tAumySRUmjVwmF.1Context: 6731572a5686fd82
2024-11-25 15:31:56 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 15:31:56 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 64 2b 74 41 75 6d 79 53 52 55 6d 6a 56 77 6d 46 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 37 33 31 35 37 32 61 35 36 38 36 66 64 38 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 31 51 41 66 4f 79 6d 76 64 73 71 50 7a 54 33 78 51 2b 33 59 30 73 4a 6f 6e 42 68 72 58 50 44 74 4d 42 67 30 58 63 6b 68 75 45 44 46 7a 4a 43 4f 6b 67 39 45 7a 39 49 78 6c 39 6b 6e 6f 46 55 70 32 34 59 61 45 6d 56 38 2f 65 79 2b 72 56 70 78 62 45 61 33 4e 69 47 52 2b 64 39 32 39 4b 34 79 79 51 50 56 4b 4c 76 59 55 61 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: d+tAumySRUmjVwmF.2Context: 6731572a5686fd82<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeU1QAfOymvdsqPzT3xQ+3Y0sJonBhrXPDtMBg0XckhuEDFzJCOkg9Ez9Ixl9knoFUp24YaEmV8/ey+rVpxbEa3NiGR+d929K4yyQPVKLvYUaS
2024-11-25 15:31:56 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 64 2b 74 41 75 6d 79 53 52 55 6d 6a 56 77 6d 46 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 37 33 31 35 37 32 61 35 36 38 36 66 64 38 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: d+tAumySRUmjVwmF.3Context: 6731572a5686fd82<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 15:31:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 15:31:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6b 4a 66 61 64 38 78 59 68 6b 47 48 38 31 48 66 5a 39 7a 35 67 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: kJfad8xYhkGH81HfZ9z5gw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:01 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:02 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: 19b35b80-c01e-0049-150a-3eac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153202Z-174c587ffdfdwxdvhC1TEB1c4n00000005yg00000000txdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:02 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 15:32:02 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49724	207.211.31.106	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	738	OUT	GET /s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:04 UTC	2371	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 25 Nov 2024 15:32:04 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/Q9GdEwrM4EluDeqdkxuDLfAIPOqj37YeKQhnMLLpUqwM1daWzCqV-m2PmiX-qlE38uw9upro1H6SmOMPQCDrCyXqcuhrFbW-xgk7Nk8JFr3mUKBs90aFqi-L9K_OOOCqYtOM3LmiEikGZ6-umkmL_vNw-NYtuyzqS5z_w50Y3h9GeKK9Uyx2g02xJmaRvrsv-14UNryeLWuaCaIInzDpjXepaoYE4HctSqBQTCT8BSPgj4QHSmoJCCcCWQyk5eChNYyqnRZvznE3JntjDbNzkcpVufzXTAz2iabcRNIUwcEGBBKNygc0v7cKO08xCRX5AAidAuubeURvFbBFZkpS9MPHob6PQSnv1rfNRm9VUyVGkwZNs8QxyTdZr4EdtF4tgauzWn4-p86sw0gYEwglvf2XOl2peNL6UnHhmL9s2Wo8pmC-iN_zxytde66CDJr1mQcfY9BWRqXtequ4C1zBy4UAOnl3ToCDKANcAF9JoK1CRmmpnUg_Coxk2pwKdNHWIDzJ3Cj6Ms_mIAbBUW7ZUP0aiwNF9iMLRd1Br8rZZY-8l0J55NzUrOxlA_vp3Mm_w-mCiUOsJ_SzdZbYfsD1yrnNWrNU6mSrtVisW8hQIUfKk2w2iVOukBGASYGhdoiJjMQvWr73Uutdpzl0LQLm3knODeg2gkaCDtSFoRilhNz5hOQKsqxepDxhokx-HWDV0Z11jgUW5dF-Wo_pqFHCIvGsxYJ3yujMA9cMOC21pOHnmegTSdERNy2n4rdU7JDOObHxpRThp7j6VAcX3SyMasf4nMR3BsNja8ucysMLYp-aLX947XsreJkKaDsH5U43TfwdeYQb65md2hP31Wvik2-cDTdCAS7LSa0wWjwUCfr6EzaWf6q5bDXGbbgvuv-Ac1QxcNoeykkq5Q71vDCvZxKbRxMcYYNfKJgimfEuMNTAoSWFR4YbWMZTRgLkDQ2fgIhxnlAabexfY4E [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49723	40.126.53.9	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4831 Host: login.live.com
2024-11-25 15:32:03 UTC	4831	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-25 15:32:04 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 25 Nov 2024 15:31:04 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_BL2 x-ms-request-id: a3f9bdbd-876e-4b3a-8595-a38263d271db PPServer: PPV: 30 H: BL02EPF0001DA31 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 25 Nov 2024 15:32:03 GMT Connection: close Content-Length: 11177
2024-11-25 15:32:04 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49722	40.126.53.9	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:03 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4831 Host: login.live.com
2024-11-25 15:32:03 UTC	4831	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-25 15:32:04 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 25 Nov 2024 15:31:04 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C558_SN1 x-ms-request-id: dd8a6b87-d24b-4e57-8af0-d945bdc681fe PPServer: PPV: 30 H: SN1PEPF00040188 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 25 Nov 2024 15:32:04 GMT Connection: close Content-Length: 11177
2024-11-25 15:32:04 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49721	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:04 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 76 57 4d 39 75 50 38 38 68 45 43 64 51 69 64 4e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 38 63 64 65 36 35 63 65 39 63 38 66 35 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: vWM9uP88hECdQidN.1Context: c58cde65ce9c8f5f
2024-11-25 15:32:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 15:32:04 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 76 57 4d 39 75 50 38 38 68 45 43 64 51 69 64 4e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 38 63 64 65 36 35 63 65 39 63 38 66 35 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 31 51 41 66 4f 79 6d 76 64 73 71 50 7a 54 33 78 51 2b 33 59 30 73 4a 6f 6e 42 68 72 58 50 44 74 4d 42 67 30 58 63 6b 68 75 45 44 46 7a 4a 43 4f 6b 67 39 45 7a 39 49 78 6c 39 6b 6e 6f 46 55 70 32 34 59 61 45 6d 56 38 2f 65 79 2b 72 56 70 78 62 45 61 33 4e 69 47 52 2b 64 39 32 39 4b 34 79 79 51 50 56 4b 4c 76 59 55 61 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: vWM9uP88hECdQidN.2Context: c58cde65ce9c8f5f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeU1QAfOymvdsqPzT3xQ+3Y0sJonBhrXPDtMBg0XckhuEDFzJCOkg9Ez9Ixl9knoFUp24YaEmV8/ey+rVpxbEa3NiGR+d929K4yyQPVKLvYUaS
2024-11-25 15:32:04 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 76 57 4d 39 75 50 38 38 68 45 43 64 51 69 64 4e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 38 63 64 65 36 35 63 65 39 63 38 66 35 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: vWM9uP88hECdQidN.3Context: c58cde65ce9c8f5f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 15:32:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 15:32:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4c 73 79 54 4b 43 47 59 59 55 32 6e 65 54 6d 6b 53 54 4c 51 58 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: LsyTKCGYYU2neTmkSTLQXw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49725	207.211.31.106	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:04 UTC	2807	OUT	GET /r/Q9GdEwrM4EluDeqdkxuDLfAIPOqj37YeKQhnMLLpUqwM1daWzCqV-m2PmiX-qlE38uw9upro1H6SmOMPQCDrCyXqcuhrFbW-xgk7Nk8JFr3mUKBs90aFqi-L9K_OOOCqYtOM3LmiEikGZ6-umkmL_vNw-NYtuyzqS5z_w50Y3h9GeKK9Uyx2g02xJmaRvrsv-14UNryeLWuaCaIInzDpjXepaoYE4HctSqBQTCT8BSPgj4QHSmoJCCcCWQyk5eChNYyqnRZvznE3JntjDbNzkcpVufzXTAz2iabcRNIUwcEGBBKNygc0v7cKO08xCRX5AAidAuubeURvFbBFZkpS9MPHob6PQSnv1rfNRm9VUyVGkwZNs8QxyTdZr4EdtF4tgauzWn4-p86sw0gYEwglvf2XOl2peNL6UnHhmL9s2Wo8pmC-iN_zxytde66CDJr1mQcfY9BWRqXtequ4C1zBy4UAOnl3ToCDKANcAF9JoK1CRmmpnUg_Coxk2pwKdNHWIDzJ3Cj6Ms_mIAbBUW7ZUP0aiwNF9iMLRd1Br8rZZY-8l0J55NzUrOxlA_vp3Mm_w-mCiUOsJ_SzdZbYfsD1yrnNWrNU6mSrtVisW8hQIUfKk2w2iVOukBGASYGhdoiJjMQvWr73Uutdpzl0LQLm3knODeg2gkaCDtSFoRilhNz5hOQKsqxepDxhokx-HWDV0Z11jgUW5dF-Wo_pqFHCIvGsxYJ3yujMA9cMOC21pOHnmegTSdERNy2n4rdU7JDOObHxpRThp7j6VAcX3SyMasf4nMR3BsNja8ucysMLYp-aLX947XsreJkKaDsH5U43TfwdeYQb65md2hP31Wvik2-cDTdCAS7LSa0wWjwUCfr6EzaWf6q5bDXGbbgvuv-Ac1QxcNoeykkq5Q71vDCvZxKbRxMcYYNfKJgimfEuMNTAoSWFR4YbWMZTRgLkDQ2fgIhxnlAabexfY4EALRSxWaF7FeI7TFQGGfbmP4FopRlqW0o4h89TWpFC4 [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:04 UTC	376	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 25 Nov 2024 15:32:04 GMT Content-Length: 0 Connection: close Location: https://bizcreditservices.sharepoint.com/:b:/s/AximClients/EZAtYmCEsOZGtfivHr9tsMgBw1Wx_VRJQLySCr5DYzUrAw Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 44ae66ae-301e-001f-7627-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153205Z-15b8b599d886w4hzhC1TEBb4ug000000068g00000000389p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:05 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c9502ca5-e01e-0033-0fb4-3e4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153205Z-178bfbc474bpscmfhC1NYCfc2c000000064g00000000ru7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:05 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:05 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 89a9fa5c-d01e-0017-5438-3cb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153205Z-178bfbc474btvfdfhC1NYCa2en00000007tg000000005106 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:05 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 97edb58e-001e-00a2-13a4-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153205Z-178bfbc474bmqmgjhC1NYCy16c00000007ng00000000nkye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:05 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:05 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:05 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: e2d9d15e-301e-003f-65f5-3e266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153205Z-15b8b599d889fz52hC1TEB59as00000006700000000008u2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:05 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49733	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:05 UTC	2594	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=09ecb35ce3354150af86cf6d748c6dff&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338388&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: iR5oYBukH0Gc0Bwy.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:06 UTC	814	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 2299 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: H/axq78Fw537RhzjTbQjBbPNUSjHFAdWmmgCiUingUU8u+p0dVkMadhmTRlZuA+3SgIIIX/3UojfXAxz1gmce3TNerOaGOi4TjVO3p2l5ATAT9p1T6lNC9MIwgs0CQBFoZd+rUnTIxIG6unNFo+tYkSpUZe4VwotwPoSwfP7beF4b277ZQW9EnPqw+Gh/2IN1Ee/Ir4VSCb7Y5ZnQj47qZJ7D2ExeBR3aiCsZEvZIHK8bQYeYfGQ2e3uCE3KvTyCsjBPSLfDYUWHNeORN1RbdRHNiv51FbQGEJg6FGmgnI8Qg0drVK13Xslo1jBySwzDRxhIUGMVzinWtgkUlPouyg== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:05 GMT Connection: close
2024-11-25 15:32:06 UTC	2299	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 75 67 67 65 73 74 69 6f 6e 73 4f 6e 53 74 61 72 74 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 7d 2c 5c 22 70 72 6f 70 65 72 74 69 65 73 5c 22 3a 7b 7d 2c 5c 22 74 72 61 63 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"SuggestionsOnStart\",\"propertyManifest\":{},\"properties\":{},\"trac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49735	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:06 UTC	2587	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=27c7ed7ae6864ebeb09bca6edd2fbb7e&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-280815&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waas [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AATDlfZofR9w3LjELVUeP9dsKuD9D70glkabB0X15zNm64/Qh5XuI3LWJd2fiqjRANSYNJAjarrRu3cpWv9Jb1qWXUVHW2ryw1FA9spZnEeZZOsLJbrapFBkIXv9mE9vp8ymmGt6m00EXlt2eMEY/foVKr4vS5C5wIsJDCdg77EQ7CkR731Lha8pwr9PMb5Ftgr1kmcpzB2ao6UIRopZObR+sINk9QzxKHwDntuWf/hwG7QEOMIwZ8kP1QF/DNr2ZVwXNyAbAaWykPkg/HkQBt5p09WBwzXveswNRNmeBlGM6Zc6U8ZpQS4Xhd+QS32tZK2AHmB4PWzsYS4KGELyrEZcQZgAAEMHQsUYmu0K/hHHCGTXTlhqwAYuu/GX8rnIbBKTsBxm0PdzmiY1vo5rIPge40aiYIruxvHxRapxqkXcKXazK+9SR+nhQhuGfJrm2mNddDT3ig3jv7F5qoBQZgDF3DHZUyMoPincFUGa1dNlOjoA8VBcoiqC1qOuAuWvufle+kx+X09kwhTjz9M8EkGOkBC3NGtD9dsekGTO/7hKT4T4NB9UF0sk1Ss7f+wCSOWVqpPNWeBE1kmSCDetwGrsSI9sqEu1cW7xzWFuiARu/PMNc/ia5YAJ4NkLqEH3JaWh+anMTxVSuRkKAHmmsdZChvVG1tNFgqeC/kqvcuS/do2bS6bBtXC5M1yXT0a9Ngu0x4JGZqgd6DvMn0Fp+MpSu317AzUbAwViJlf1/3/khn3sveLsfTaSINnaGhYdGhPmnGDLLqNdIUJnpEvMg+jMieNnlCRHr8HWbWgZjLdCeyUHskH5U4tGY15MZhK05nrwcn1iKKFEotAh+L7XTvGud4aYirYCkStqDpoQmjW8Qp6MJmJF0MwF2xF9HTNEu6ph96brAKoieyKN/lF93lwPL5eAU2FqhjxNdvgNzfDzITDF624JAwNcB&p= Cache-Control: no-cache MS-CV: iR5oYBukH0Gc0Bwy.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:07 UTC	955	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2939 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T1-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"65792"},{"REGIONALPOLICY":"1"}] X-ARC-SIG: DNZPjf3vnliLkxBfh3+F+SYOkLizO/EkHn7rawDeRLksPYrWbvHDvl+PaaTv4xryC0xPR+HaNgCqMyFZ8ZfioxJK3NY5DWSmfKC+7zbsA+nsPoAM3lKXU5CXg9P/3Eh/ncJDgVQUAFqQMKHEhsECtLZ9mw8nGynPsxzS08+k9dDPN+YO5WXTEP63nspOwYr9g+pp8ylcQ0ArIlzXwB1JM+tXTcg0GSgYctDhuAiNsHV9S6SBoV+D56FsmQDUV4U9XB2dEvWrwPtTnv8OEJF3vHrDfstqPeL6ybbszdcixOSHyStSlx77a1Z8CKGEBQNy6zYk0UxU2aiQdQ/I/a6Y7Q== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:06 GMT Connection: close
2024-11-25 15:32:07 UTC	2939	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49736	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:06 UTC	2604	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=e64f51993f0d491fbd0ece74acf9bc89&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338387&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&sc-mode=0&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1& [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: iR5oYBukH0Gc0Bwy.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:07 UTC	815	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 23451 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: lFOvIVonZW065UowWvo6I4KE7dAhqbaYJhIUJtbZvBeyD+eFEfaknL6C3BAJrs7Pv/g69+/eTEjbzrzTBNyMel3lZFFzvNspqKhMxy8B+loYlLldOACqbzXui9b9S8eHsJ/GOxFOo8rMAUyjsK84n5uaWNeTg/FQBJfTAPBkdLwuSi9k6k+5+XG+L6sz4Jd5ii7NQ+/U7qoa0ghrrI8inxm69ncgdgTneGYkEHeGPzhTRnNgrGfeOY3ZZfGNmODTDBr/MCQjrvZORI/VJ//qDvCMzltELUn8D92EXD5Hht8isJ0YKvbYA5eEbmQxjEHReOfvdJf6jwqDyQchCJIpeA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:06 GMT Connection: close
2024-11-25 15:32:07 UTC	15569	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2024-11-25 15:32:07 UTC	7882	IN	Data Raw: 37 42 32 33 30 36 36 46 46 46 46 46 46 46 46 5c 22 2c 5c 22 65 69 64 5c 22 3a 7b 5c 22 74 5c 22 3a 5c 22 74 78 74 5c 22 2c 5c 22 74 78 5c 22 3a 5c 22 55 32 56 68 63 6d 4e 6f 51 57 51 6a 4f 44 51 79 4e 54 41 32 4d 7a 59 77 4d 54 59 78 4f 44 49 6a 4d 6a 4d 7a 4e 6a 41 30 4f 54 67 35 4d 6a 67 30 4d 6a 67 32 4d 51 3d 3d 5c 22 7d 2c 5c 22 5f 66 6c 69 67 68 74 5c 22 3a 5c 22 5c 22 7d 7d 22 7d 2c 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 Data Ascii: 7B23066FFFFFFFF\",\"eid\":{\"t\":\"txt\",\"tx\":\"U2VhcmNoQWQjODQyNTA2MzYwMTYxODIjMjMzNjA0OTg5Mjg0Mjg2MQ==\"},\"_flight\":\"\"}}"},{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49742	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 15:32:07 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=64848 Date: Mon, 25 Nov 2024 15:32:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4712fcc8-d01e-002b-279a-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153207Z-174c587ffdf59vqchC1TEByk68000000065g00000000tvxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d8f13441-a01e-0021-5e2d-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153207Z-178bfbc474bxkclvhC1NYC69g400000007q0000000002dz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:07 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b169a0d5-c01e-00a2-4e03-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153207Z-178bfbc474brk967hC1NYCfu6000000007cg00000000ms94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 3cf7f359-901e-005b-4f39-3d2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153207Z-178bfbc474bpscmfhC1NYCfc2c000000069g000000006e9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8592a006-f01e-0085-6b6a-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153207Z-174c587ffdfb485jhC1TEBmc1s00000005y000000000grh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49743	13.107.136.10	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:07 UTC	739	OUT	GET /:b:/s/AximClients/EZAtYmCEsOZGtfivHr9tsMgBw1Wx_VRJQLySCr5DYzUrAw HTTP/1.1 Host: bizcreditservices.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:08 UTC	1071	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 292 Content-Type: text/html; charset=utf-8 Location: https://bizcreditservices.sharepoint.com/sites/AximClients/_layouts/15/Authenticate.aspx?Source=%2F%3Ab%3A%2Fs%2FAximClients%2FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%5FVRJQLySCr5DYzUrAw P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,63,720534,0,525568,61 X-SharePointHealthScore: 2 SPRequestGuid: 066267a1-10c0-6000-f3cc-9dec4cd29e39 request-id: 066267a1-10c0-6000-f3cc-9dec4cd29e39 MS-CV: oWdiBsAQAGDzzJ3sTNKeOQ.0 Strict-Transport-Security: max-age=31536000 X-AspNet-Version: 4.0.30319 SPRequestDuration: 122 SPIisLatency: 4 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25430 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 04E9B39CCD0C4543B42E06053FA186E1 Ref B: EWR311000106031 Ref C: 2024-11-25T15:32:07Z Date: Mon, 25 Nov 2024 15:32:07 GMT Connection: close
2024-11-25 15:32:08 UTC	292	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 69 7a 63 72 65 64 69 74 73 65 72 76 69 63 65 73 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 73 69 74 65 73 2f 41 78 69 6d 43 6c 69 65 6e 74 73 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 25 33 41 62 25 33 41 25 32 46 73 25 32 46 41 78 69 6d 43 6c 69 65 6e 74 73 25 32 46 45 5a 41 74 59 6d 43 45 73 4f 5a 47 74 66 69 76 48 72 39 74 73 4d 67 42 77 31 57 78 25 35 46 56 52 4a 51 4c 79 53 43 72 35 44 59 7a 55 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://bizcreditservices.sharepoint.com/sites/AximClients/_layouts/15/Authenticate.aspx?Source=%2F%3Ab%3A%2Fs%2FAximClients%2FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%5FVRJQLySCr5DYzU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49744	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:08 UTC	2594	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153204Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=10bbbc931825442da0f22339a581f36c&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338388&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAZyLU9X1pXePMe4KgBijzYC7Sx7qqII89R8S58dsGTY795VOf0qxLLD4GDQ24LTwtl0FZ95FQ9+zf/tqZz/EAqjIURyAUdCnPPlvjUwBnBfdDbLaITpAGdLppS80wwLo3OMzoOmfBL4CLdD32Wtz7b39bfo13Bu4YdkaO2ukOFdX4IsGeC/vXr4McwGt/gQE8/+QHOdGEXPfK15mjiMG8WlvhzH5UovBbPmFA0cJ2s1D+OiTVufj02TpluoRtPHr0Lkubmh013QtRLlozhrpAqnC1Vd4zyRIIKecXQJU4j9NCFAtecw4jyHdmHR70T/mUms/KcoTGDIm7VJBOi5llJEQZgAAEK0Yuj6bvKcH2UFZkBeQ9ZKwATz0Cgq9cnM9IafV49scEdIyC2aTbKaCoJ7dDk2fKeEsLjfGNvR/T6V0hZatVKUg/AXFOf8mYL7SxXNCCwwc5ZWXM+NgPqdR99SRIhVSiXinHjkiPjvgRr58W6LSGXGIYIt0gLxii54zYu0N+hfUqKt/6MLdNtzudYN4cwCyGdZsQRcYLWbRu8ZdYYFV+KNHs3Dyz7xLc3sesSZK4ai+/2xDxbHw0zzQoSh0CWXm9hfj6o6Nk4XpviWy9+KlqaitOJulJyvtGImH/j9obQkRYjF5tSDF39zABCDzUPsa6NvkYhITWY2YIfpD70gAzQBRnDeXpwhemTQZVA68DZ+7C4mON5byB+XHf2y9nwnjLj+Pq0oJpLuC8ufyNMNPsicyAe81tutd5IvdDHeiMfT2CR5CCAeNzoeXl+kdpHHPGh1wuwRd4rOs9PjyiBXqCoy7B+0+FFXBGC74yAqZ2HdRKQws+PKRs2smYNdP4q5MtXQnZqZRqEtz2v8v+lMBpSNvjsFKX+Fjs3E1ygj4XCgF/Uq9WXIMFnc2OcfKP8pCSMkvrEYLBkxRc48lC6A2LIyTTNcB&p= Cache-Control: no-cache MS-CV: iR5oYBukH0Gc0Bwy.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:08 UTC	814	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 3777 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: OI5l8QdDMj2zUmXRo0CNF3lUYobAAzuxFGQrPVm2f9LRNJVk0NVWkPaSeclic4DV7uK7u0honCH9FPYWv3mmnjteQAqvjPlvdLCCJprzkJPjTcC2UnnT8LLQdgQyb54qFeFUQS4fyFtBm+T8MmqYOgeCqnp7A2H5gA9KV8ux1Ngzag6uiAzJNtjUFlF6bI4MH0yEdyCTR81S8+gKKEPmO2bqndkkaKvjC3dR1eSeE3wc2ucz1NYjY0ShEvLMoaCqkwPmknjioeHq4aQKvV+oWIhA1zIA8+4Xlv+KaFlnvM+USSU0nqmSdVjgg9w0qcOvstNfiWosG78tNyUo7G5LLQ== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:07 GMT Connection: close
2024-11-25 15:32:08 UTC	3777	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 75 67 67 65 73 74 69 6f 6e 73 4f 6e 53 74 61 72 74 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 7d 2c 5c 22 70 72 6f 70 65 72 74 69 65 73 5c 22 3a 7b 7d 2c 5c 22 74 72 61 63 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"SuggestionsOnStart\",\"propertyManifest\":{},\"properties\":{},\"trac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49746	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 15:32:09 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=64872 Date: Mon, 25 Nov 2024 15:32:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 15:32:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49745	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	2610	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153206Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=9675a04e3e6a40e793006edfbd27cdc0&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-280815&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waas [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDoAppeBAAUGoFunEzxzyai/T0i5tnZAAR1eX0AAZyLU9X1pXePMe4KgBijzYC7Sx7qqII89R8S58dsGTY795VOf0qxLLD4GDQ24LTwtl0FZ95FQ9+zf/tqZz/EAqjIURyAUdCnPPlvjUwBnBfdDbLaITpAGdLppS80wwLo3OMzoOmfBL4CLdD32Wtz7b39bfo13Bu4YdkaO2ukOFdX4IsGeC/vXr4McwGt/gQE8/+QHOdGEXPfK15mjiMG8WlvhzH5UovBbPmFA0cJ2s1D+OiTVufj02TpluoRtPHr0Lkubmh013QtRLlozhrpAqnC1Vd4zyRIIKecXQJU4j9NCFAtecw4jyHdmHR70T/mUms/KcoTGDIm7VJBOi5llJEQZgAAEK0Yuj6bvKcH2UFZkBeQ9ZKwATz0Cgq9cnM9IafV49scEdIyC2aTbKaCoJ7dDk2fKeEsLjfGNvR/T6V0hZatVKUg/AXFOf8mYL7SxXNCCwwc5ZWXM+NgPqdR99SRIhVSiXinHjkiPjvgRr58W6LSGXGIYIt0gLxii54zYu0N+hfUqKt/6MLdNtzudYN4cwCyGdZsQRcYLWbRu8ZdYYFV+KNHs3Dyz7xLc3sesSZK4ai+/2xDxbHw0zzQoSh0CWXm9hfj6o6Nk4XpviWy9+KlqaitOJulJyvtGImH/j9obQkRYjF5tSDF39zABCDzUPsa6NvkYhITWY2YIfpD70gAzQBRnDeXpwhemTQZVA68DZ+7C4mON5byB+XHf2y9nwnjLj+Pq0oJpLuC8ufyNMNPsicyAe81tutd5IvdDHeiMfT2CR5CCAeNzoeXl+kdpHHPGh1wuwRd4rOs9PjyiBXqCoy7B+0+FFXBGC74yAqZ2HdRKQws+PKRs2smYNdP4q5MtXQnZqZRqEtz2v8v+lMBpSNvjsFKX+Fjs3E1ygj4XCgF/Uq9WXIMFnc2OcfKP8pCSMkvrEYLBkxRc48lC6A2LIyTTNcB&p= Cache-Control: no-cache MS-CV: iR5oYBukH0Gc0Bwy.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:09 UTC	955	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2966 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T1-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"65792"},{"REGIONALPOLICY":"1"}] X-ARC-SIG: AKVXfsmcknBk6jkPwmK5+z9fp3rna68CE0/VXJKSI8v4IdsT75wOhROIGPwknPZDYO06uT+Z3398WU7mrVrc0TN0uaTIqm8fxZw4bo3gJx73fXrRl0K/mEpzbs97Ps6vQC5/j7RR9/59EM80Xf+ZUYhRvcX85bqhSjiu4NSd0cz9ygNF6mdY2B3wiOtyIc6jVtsB/zgvp9E/arWRBC1DUyCvsSV7qd48hTVW4CQjeK3lUER6/6ImX96qdOfNff5JGigx6TBnZLMNANCGri5auZanuSaYdxJn3rJTmTRBO/+ddLT0BAOroA9LsPJyzEse58CvY4zx/nEo9CsdQ5wsEw== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:08 GMT Connection: close
2024-11-25 15:32:09 UTC	2966	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: a9413e51-301e-0099-2c01-3f6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153209Z-15b8b599d88g5tp8hC1TEByx6w00000006600000000036uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:10 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c38a0343-101e-008e-38bf-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153209Z-178bfbc474bnwsh4hC1NYC2ubs00000007n000000000qmur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153210Z-15b8b599d88g5tp8hC1TEByx6w000000063000000000d7ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: b101f067-f01e-0020-26b7-3e956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153210Z-178bfbc474bpnd5vhC1NYC4vr400000007rg0000000040qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: ec190515-201e-0096-70d2-3eace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153210Z-15b8b599d88n8stkhC1TEBb78n00000000w000000000r8sz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49752	13.107.136.10	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:09 UTC	809	OUT	GET /sites/AximClients/_layouts/15/Authenticate.aspx?Source=%2F%3Ab%3A%2Fs%2FAximClients%2FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%5FVRJQLySCr5DYzUrAw HTTP/1.1 Host: bizcreditservices.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:10 UTC	1884	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 329 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fsites%2fAximClients%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F%253Ab%253A%252Fs%252FAximClients%252FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%255FVRJQLySCr5DYzUrAw&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRiUzQWIlM0ElMkZzJTJGQXhpbUNsaWVudHMlMkZFWkF0WW1DRXNPWkd0Zml2SHI5dHNNZ0J3MVd4JTVGVlJKUUx5U0NyNURZelVyQXc=; expires=Mon, 25-Nov-2024 15:42:10 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,8409600,264,529,2383284,0,3958217,57 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 076267a1-0065-6000-f3cc-98f693357c0a request-id: 076267a1-0065-6000-f3cc-98f693357c0a MS-CV: oWdiB2UAAGDzzJj2kzV8Cg.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5c&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 14 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25430 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AF6B360AEAF1403FAA9AF54D1FE9E161 Ref B: EWR311000105019 Ref C: 2024-11-25T15:32:10Z Date: Mon, 25 Nov 2024 15:32:10 GMT Connection: close
2024-11-25 15:32:10 UTC	292	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 73 69 74 65 73 25 32 66 41 78 69 6d 43 6c 69 65 6e 74 73 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 25 32 35 33 41 62 25 32 35 33 41 25 32 35 32 46 73 25 32 35 32 46 41 78 69 6d 43 6c 69 65 6e 74 73 25 32 35 32 46 45 5a 41 74 59 6d 43 45 73 4f 5a 47 74 66 69 76 48 72 39 74 73 4d 67 42 77 31 57 78 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fsites%2fAximClients%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F%253Ab%253A%252Fs%252FAximClients%252FEZAtYmCEsOZGtfivHr9tsMgBw1Wx
2024-11-25 15:32:10 UTC	37	IN	Data Raw: 6b 69 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: kie">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49753	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	2604	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338387&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153206Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=46ea8e7e7b43498c978058335cfd3f89&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-338387&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&sc-mode=0&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1& [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: iR5oYBukH0Gc0Bwy.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:10 UTC	815	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 23330 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: s3q2/3Ttw4kVALrB+p+8pmwEs2mtJcoA/mGpYn2VcuRujBB0Lk+JlJSDq+xeKMw4s5TKhBU4kLnydNITTEGDLjBfCpUZOSgRK/LGF8Mp6aX3kluwXsAw5TBvuMAUySViovYQysXWIFsKxcACYGksGJjPdHgu0WvwxHEbR6u0F6ERVwKdTL9dVmk4/nMtT/Kc2PDP/TVZN6HAo/CphvaA6ujikClKi++9zNLMNOr+cezRptHO50Vt/b10td7ebkqzpoV/0UpguEvf7WsHLgnD1bAGElu0ZVI5q1vYwlM/x2YLC3qjteIapdU4mqpDgWR+WT7g4+2FSRBQykl6+Z7AbQ== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:09 GMT Connection: close
2024-11-25 15:32:10 UTC	15569	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"ima
2024-11-25 15:32:11 UTC	7761	IN	Data Raw: 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 4c 6f 63 6b 53 63 72 65 65 6e 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6c 61 6e 64 73 63 61 70 65 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 67 65 5c 22 7d 2c 5c 22 70 6f 72 74 72 61 69 74 49 6d 61 67 65 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 69 6d 61 67 65 5c 22 7d 2c 5c 22 73 68 6f 77 49 6d 61 67 65 4f 6e 53 65 63 75 72 65 4c 6f 63 6b 5c 22 3a 7b 5c 22 69 73 4f 70 74 69 6f 6e 61 6c 5c 22 3a 74 72 75 65 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 62 6f 6f 6c 65 61 6e 5c 22 7d Data Ascii: dContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"LockScreen\",\"propertyManifest\":{\"landscapeImage\":{\"type\":\"image\"},\"portraitImage\":{\"type\":\"image\"},\"showImageOnSecureLock\":{\"isOptional\":true,\"type\":\"boolean\"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49757	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	375	OUT	GET /th?id=OADD2.10239360608909_1XWUMGMD2M0J0LDVR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:10 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 663065 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C446F046C6A64B08A91064F4CB70717B Ref B: EWR30EDGE0215 Ref C: 2024-11-25T15:32:10Z Date: Mon, 25 Nov 2024 15:32:09 GMT Connection: close
2024-11-25 15:32:10 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 19 32 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 32 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 33 3a 32 36 20 32 32 3a 34 37 3a 34 36 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``2ExifMM*bj(1r2i``Adobe Photoshop 24.2 (Windows)2023:03:26 22:47:468
2024-11-25 15:32:10 UTC	16384	IN	Data Raw: 65 f3 ae 0c 86 35 dc ae a4 bb a9 e3 6a 0d bb 54 93 5a c2 14 e3 05 38 b6 d3 6f 4d ae fa b7 f7 58 ce 9b 4d 5b 63 b1 f0 1e b9 ac d9 5b e9 f6 71 c9 7d 05 d7 88 be db 13 f8 bf 51 b5 92 5f 3a 17 cb cd 73 1c 1d 3c 91 f2 23 48 7e ef 6a e4 fc 49 2f 85 6e 2e b4 fd 6b c4 d7 f7 5a e6 a5 13 aa be 81 6f 3f cb e6 79 86 36 76 55 1c 6c 50 ae 53 ef 1d f8 ab 7e 01 b7 d6 6f ae a6 f0 e5 9c fa cd fe 9a ce d6 88 9a 85 d2 c7 67 6d 1c d3 7e f2 26 6e 7e 52 fb 4e 32 00 3c d3 17 fb 23 49 f1 07 99 e1 fd 76 3f 0f f8 82 2b b8 f4 5b 87 b8 fe 06 92 4f 29 9a 29 14 79 71 c3 8f 9b 76 7c cd bc 9a ca b6 23 9a 77 e4 db 44 d7 9e fa 74 bf 95 fa 19 69 6b ff 00 c3 9d 3e b9 e3 2b 6f 0a 78 17 c4 1e 24 b7 d1 b5 8b ab 99 ed a0 d3 f4 1b 8d 46 3d d1 c3 6e ed 9b 89 a4 84 e4 40 ed e9 9c fc cb de bc 6f e3 Data Ascii: e5jTZ8oMXM[c[q}Q_:s<#H~jI/n.kZo?y6vUlPS~ogm~&n~RN2<#Iv?+[O))yqv\|#wDtik>+ox$F=n@o
2024-11-25 15:32:10 UTC	16384	IN	Data Raw: 58 d4 a3 8b 4f b7 45 b3 b4 b1 b7 81 a5 96 f6 e0 c8 9f 26 78 dd c7 2d b3 3b 57 ef 15 c8 a8 95 48 42 2d d9 f6 34 8c 63 7d 19 e5 d3 3d b5 ac 1e 5c 3e 5e e6 75 d9 70 ef b5 b7 77 c2 d7 49 a5 f8 93 57 f0 af 81 ee 2d 6d f5 68 ed 6c 6f 2e da 2b b7 d3 91 56 fa e5 84 7f 32 79 ad 97 48 fe 6e 7d 6a 0f 8e 9f d9 f7 1f 10 ae 2c 74 5f 09 ff 00 c2 3c b6 1b 60 9a c5 2e 96 55 49 87 5d bb 7e e7 fb bb 99 b3 d4 d3 b5 6f 85 7e 2a 8b c0 16 9e 34 9a 08 ee 34 b9 61 69 66 b8 85 d7 f7 38 93 cb fd e6 71 fc 5c 00 bb 8f 5a da 35 29 a5 1e 77 67 22 bd 8a 92 45 5d 5b c4 91 ea 9a 06 99 a2 69 f6 16 36 16 36 1b a5 48 ad ff 00 d6 bb 1e f2 c9 fc 6d f5 e9 da 9d e1 7f 0b df 78 83 56 85 b4 dd 27 55 d4 ae 25 b8 58 ad e1 b4 81 99 a6 63 fc 29 c6 d1 f5 35 d1 f8 6f e1 37 89 ee 34 3d 1f 51 ba b1 ba d0 Data Ascii: XOE&x-;WHB-4c}=\>^upwIW-mhlo.+V2yHn}j,t_<`.UI]~o~*44aif8q\Z5)wg"E][i66HmxV'U%Xc)5o74=Q
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 44 75 d1 f8 5b c3 9a e6 9b 63 ac 6a da ec f7 fa b6 a9 b9 6e 3e cf 3c 6a d6 d8 fe 06 47 1f 33 56 3d c7 86 a0 d3 77 e9 b7 9a 96 a5 15 8c f7 3b a1 86 1f 2e 56 7f ee bb 22 1f bd 57 be 20 5b 69 f6 b1 d8 af 86 f4 d8 2c 2e 1b e6 9a 69 ae 9a 56 76 ff 00 63 8a 8f 49 8b 4d b5 8f 76 a1 ad 49 14 d1 26 e7 86 c7 e6 68 58 ff 00 b2 c7 f4 52 6a 23 52 6e 3c d1 96 8f a5 8a 73 7d 36 3a 6d 3e 0f 85 3a 5c 76 2b 79 77 e2 3b 38 d6 16 5b e7 b7 76 82 79 9b fb b8 fb bc fb d7 9f 6a d7 1a 0a ea 52 c3 67 24 72 ee 7d d6 f3 3e e5 d8 bd a3 93 fb cd ea d5 d2 6a 9e 2b d5 5f 47 fb 2e a9 05 8d fb 45 f7 2e 26 4f 22 77 5e db d1 86 d7 fa 8e 6b 4e cf 46 b1 bd f0 fd 8a eb 91 e8 fa 4d f6 f6 6b 17 bb 83 ef e7 f8 5b b1 f6 dd 55 17 ec df ef 2f ab 0e 77 f6 8f 29 ba d3 56 0b a7 db e6 79 6c 9b a1 f9 3f Data Ascii: Du[cjn><jG3V=w;.V"W [i,.iVvcIMvI&hXRj#Rn<s}6:m>:\v+yw;8[vyjRg$r}>j+_G.E.&O"w^kNFMk[U/w)Vyl?
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 3b fe 27 1f e1 1f 03 69 1a 8e 9b a8 2e bd 1e a3 a3 49 75 6f e7 e9 f6 e8 92 37 9d 9f ba 5e 4c 65 57 bf 4f 9a b4 f5 6f 83 9a 67 86 bc 39 a7 ea 1a c7 88 67 96 6b 84 5f 3a de dd 16 2f 94 7d f8 c6 fe 43 63 a7 1c 9a de d5 be 32 ea fa a5 ad be 8b 36 a5 03 cd 14 cd 04 33 42 8b 06 fc b7 ca ee 57 f8 53 b5 60 78 b1 3c 5f a8 f8 c7 ec ba 96 b5 f6 a9 ac e1 f2 2c 6e 1f 6a b7 96 5b 71 64 db ff 00 eb 22 bb 5c 71 aa a7 34 eb 38 47 47 6d 1f 4b 59 5f 5f c4 a7 55 a5 fd 23 9b bc 83 c3 9a 75 f2 68 ff 00 bb 56 97 cb df 7d fe b6 58 63 0c 4e ed 8d c7 dd 3b 59 7f d9 ae 69 ad 2c 7f b7 2e ed ed ef fe d1 a4 c5 36 e4 7f 21 bc a9 a3 fe 1d dd 0a b5 7a a6 9f f0 f2 db 54 92 1b 3b 88 27 5b e5 b8 6b 99 a2 b7 75 69 e6 f9 7e 45 dd ce d4 ee 6b 4b 5a f8 5f 6d 15 8f 99 a3 e9 b3 c5 24 b0 c9 f6 b9 Data Ascii: ;'i.Iuo7^LeWOog9gk_:/}Cc263BWS`x<_,nj[qd"\q48GGmKY__U#uhV}XcN;Yi,.6!zT;'[kui~EkKZ_m$
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 79 e3 8b 1d 3f c4 d7 71 e8 d6 37 16 f7 12 dd cd 36 df 3e da 38 57 71 fd db 64 a3 b7 cb 8f 97 9e d5 50 a5 cf 1f 6b 24 ae 54 68 f3 2e 69 2d 4f 58 fd 9d a6 d1 1b c3 be 23 6f 13 e9 49 79 ae 4f 14 2b e1 ef 3b cc ff 00 5d 27 dd 1f dc 0a 3e 53 96 ed 5c 0f 89 3c 7b e2 af 0e 78 9d 1b 4b 8e 3b 5b e5 76 8a 6b 87 b1 86 26 7e c1 a3 e3 ee f7 de 2b 6b 45 f8 6d e3 ef 1e ef 8f c0 da 14 f2 d8 ad df cf 2c d3 f9 51 22 95 f9 77 b3 9d a5 80 e4 81 f7 6b 6b 49 f8 7f 73 f1 2b e2 bb 78 0f 5e d6 53 fb 6b c3 f6 d3 59 dd eb f0 fe f1 6f 61 81 84 6a b1 45 81 f7 17 e5 1e bd 4d 78 8f 11 82 a1 3a b3 ab 34 e3 66 e4 af 7e 5b 5b a7 6d b4 ee fa df 4e ca 74 aa b8 47 4b 37 b5 ba f5 3c c7 c3 7e 2b d4 e7 92 68 63 92 eb 52 be ba db 06 c8 5d 99 9f 7b 7e f7 e5 1d 73 ff 00 8e d7 51 e1 3f 87 3e 3f f1 Data Ascii: y?q76>8WqdPk$Th.i-OX#oIyO+;]'>S\<{xK;[vk&~+kEm,Q"wkkIs+x^SkYoajEMx:4f~[[mNtGK7<~+hcR]{~sQ?>?
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 19 b9 3e 56 b5 b9 e5 d3 69 96 cb 1d 8d f5 e4 92 5a d8 dd 42 d3 a6 f4 f9 9d 43 72 a8 3f 8b 9f 97 3e b5 ea be 13 f8 53 ad 6a 3a a4 5e 20 f8 b7 03 f8 6b c0 fe 19 f2 27 d4 2c 66 93 65 e3 c3 23 7e e6 04 87 99 17 7b ed 1f 36 dc f3 8a f2 ef 17 78 e7 c4 fa 9f 8f a1 f1 b3 47 6b 6b 7d 6b 2a ff 00 65 db d8 c0 b0 5b 69 fb 3e 64 f2 21 e4 22 ab 73 f5 e6 bb ad 0f e2 04 fa 07 87 e1 96 1d 16 4b fd 7b 5b 46 d4 b5 bd 66 fb 51 92 e6 79 ae 36 ba c5 77 e4 cb fb b4 64 df 88 df e6 23 ef 0e 71 5d 35 39 d2 5c bb 9c f3 4a 3a ee cd 4f 8b be 00 f0 4c 5e 30 9b 50 93 5a b5 fe cf b3 49 ae f5 3b 48 67 5b 36 bd 66 93 f7 5a 5d 94 4b 93 f2 2e d1 24 b8 f9 3e 63 d6 bc 7b 50 b0 8a 5f 11 bd f5 9d dd ad ac 92 bf 99 6f 0d bc 0c d1 5b 67 b2 bb 7f 02 7d dd fd ea dc 77 7a 55 ae 87 f6 78 60 d4 ae 35 Data Ascii: >ViZBCr?>Sj:^ k',fe#~{6xGkk}k*e[i>d!"sK{[FfQy6wd#q]59\J:OL^0PZI;Hg[6fZ]K.$>c{P_o[g}wzUx`5
2024-11-25 15:32:11 UTC	16067	IN	Data Raw: 76 7e 7f 79 bd 3a d1 6a 51 e5 d7 4e df a1 5f 4f d4 2f 2f f5 5d 3b 4d 86 de 3f b0 c5 37 ee 6c 77 ed 5d c7 ab bb 1c 06 7f f6 db a5 69 da 9b cd 26 c6 6f 10 49 1c 17 f6 32 dc 34 16 f6 93 4f fb 8f b4 27 f1 f9 3f c4 a8 bf c5 f7 72 de b5 4b e3 25 be 87 67 f1 37 50 b5 f0 dc f1 dc 69 77 8e b3 e9 6f 6f f7 52 39 be 7d ad 9f ee ee da 7f dd ad 5f 84 7e 0f f1 6f 8d 7c 4d 35 af 86 6d 2f a7 d2 62 45 83 51 9a 2f 95 66 85 1b 73 ae f6 f9 77 77 c5 5d 69 52 a7 47 da 54 7c b1 4a fa fe 5e ba d8 ca a4 54 1b ec 6b 78 67 c5 7a be a9 1c 3e 0f be fe d2 b8 8f 56 be b6 b9 d4 61 87 cb fd f4 70 f7 dd f7 97 6a fd de 42 ad 7d 03 f0 d3 c4 5e 08 f1 6f ed 5d fd ab e2 49 6d 20 bc 8b 48 68 34 6d 3e e7 e6 82 c2 18 d7 f7 71 bb 37 73 f7 bd 5b d8 57 8e 69 b6 5a af c3 e8 f5 0b 8d 37 4d fb 3d d6 a4 Data Ascii: v~y:jQN_O//];M?7lw]i&oI24O'?rK%g7PiwooR9}_~o\|M5m/bEQ/fsww]iRGT\|J^Tkxgz>VapjB}^o]Im Hh4m>q7s[WiZ7M=
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 51 92 c4 7b 5b bb ef a1 0a 2d 7a 8f d6 b7 6a 31 a5 c5 8e 93 6b a7 35 bc 31 c1 35 bd ba 33 4b 37 fd 35 90 f4 dc 6a be b5 a3 ea 7a 74 8f 1d f7 fa 45 ba a2 b2 4d fc 3c f4 07 de ba e8 fc 11 2a 78 66 d3 56 d0 e7 fb 44 8a fe 6d dd bf da b7 2c df dd f2 ff 00 f8 9e be 95 a1 63 e0 8d 7b 4b d4 ad ed e4 f0 f4 7a a6 a5 2f ef 5f 46 4b af 96 18 cf fc f5 6f 7f 4c e4 56 ef 1d 4d cb 95 49 5f 5d 3a e9 fd 6f b1 a7 33 92 39 bd 4b 40 d0 67 d1 ed 2f 96 08 e2 f9 e3 59 be c8 fb a5 da 7e f1 ff 00 6a b5 7c 3f e0 8f 06 36 a4 93 37 88 67 ba d3 ee 1f 6b a3 c0 d1 4f 0b 7f b6 9f dd f4 6a f6 3f 08 f8 4b e1 c5 c7 8b 95 b5 2d 25 f4 4b cb 54 dd 71 a5 bc 9b a0 e5 7a fa 1a e6 34 3b dd 23 e1 8f 88 3e d1 67 77 aa eb d7 57 ef 25 b6 c4 b5 8f ca b2 52 df df 6f 4a f1 f0 f9 e2 94 3d 94 54 d4 f5 f7 Data Ascii: Q{[-zj1k5153K75jztEM<*xfVDm,c{Kz/_FKoLVMI_]:o39K@g/Y~j\|?67gkOj?K-%KTqz4;#>gwW%RoJ=T
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 1f de 3d 2a ff 00 c3 bf 87 de 2c f1 96 ab 71 67 e1 dd 16 4b a6 b0 75 8a f9 dd d6 25 b6 62 d8 c3 96 fe 2f f6 6b eb af 88 de 38 f1 07 80 e3 53 ac e9 3e 44 7f b9 8a de e2 c7 6d d2 dc b4 3c a0 88 75 df 1f cc db 9b 6a 83 d3 9a e5 7c 2b f1 37 c2 76 fa 3c d6 f6 be 0f ba b7 b3 bc 95 af ae 2d 34 cd 39 96 7b d6 19 5d fb d4 1d b9 7e 32 7f da c5 72 d3 e2 4c cf 13 84 9c a9 51 82 97 49 73 29 43 7f 27 7d 17 7b 6b bd b6 07 5a 31 d1 c5 dc f9 cf e2 27 85 3c 41 f0 eb c6 97 be 16 f1 0a 47 6b 78 a8 bf 3c 2f ba 2b 98 5f 94 78 db f8 94 ff 00 f5 ab 9f 86 06 78 dd 61 8e 4d cb b5 bf df af bb c4 de 3e f1 bf 81 ee 2f 24 f8 7b e1 c4 b8 86 e6 3b 68 5f 54 87 cd bc 4b 17 8c b1 9b 3f c5 b5 fe 52 9f 2f 1c d7 8a 78 ab f6 75 2b e2 27 d3 74 2f 13 da dc ea 11 68 df da 17 12 db da b4 7a 57 da Data Ascii: =*,qgKu%b/k8S>Dm<uj\|+7v<-49{]~2rLQIs)C'}{kZ1'<AGkx</+_xxaM>/${;h_TK?R/xu+'t/hzW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49754	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	346	OUT	GET /th?id=OADD2.10239340418550_1B8YD3DMBL24NYO16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:10 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 657438 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 95924E4924DF41DABD98720A2DD8ACC7 Ref B: EWR30EDGE0108 Ref C: 2024-11-25T15:32:10Z Date: Mon, 25 Nov 2024 15:32:10 GMT Connection: close
2024-11-25 15:32:10 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 33 3a 30 34 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 23:04:298C
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: dc a9 e4 22 13 fb 25 9b 7b 79 6d a6 fb 3c 9f ba 93 ca f2 ff 00 fd 8a 7f 9b 23 ff 00 d3 29 3f d5 d3 23 d4 37 fe ee 4f f5 75 35 c5 a4 8f e6 fd 9e 7f de 7f cf 2f 9e a3 e1 2e 1e f9 73 47 b8 fd f4 b6 f7 1f f9 16 bb 5f 06 fc 44 bc d2 fc dd 3f 55 9f ed fa 5c 91 79 71 7e ff 00 7c d6 8f ff 00 c4 d7 9d fe f1 26 ff 00 48 83 fd 23 fd 65 3e 3b 8d fe 6c 72 79 3f f3 ce b8 31 b9 7d 0c 6f bb 56 37 46 f4 71 95 b0 b5 a3 2a 52 b3 3e 97 f0 ee bd e7 db da df d9 5e 8b 95 b9 89 24 12 09 bf 8b fb b5 df 68 7f 10 f4 f6 87 cb d4 db ca 92 21 fb c9 3b 0a f8 e6 ce 5b 9b 6b 2f b4 5b cf 34 51 ff 00 ab fd d7 ff 00 15 5d af 87 3c 7f 79 6f 6f 10 bd 83 ed 51 c5 2f ef 7f 73 fb e8 d2 be 47 11 c3 b8 9c 2f bd 85 97 32 ec cf af a7 9d 60 b1 8b 93 19 1e 57 dd 1f 5e d8 ea 7a 7d fd bf 9f 67 79 0c c9 Data Ascii: "%{ym<#)?#7Ou5/.sG_D?U\yq~\|&H#e>;lry?1}oV7Fq*R>^$h!;[k/[4Q]<yooQ/sG/2`W^z}gy
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 5a 0c df e9 1a 7f 88 e1 fb 47 fa cf b2 5d c3 b3 e7 a2 39 6e 6d a1 fb 65 be ab 0c 51 cb 2f fa af 92 6f ff 00 66 b0 6f 21 b9 4b 1f b4 49 04 de 5d d7 fa af fe 26 99 79 65 24 3e 54 92 41 34 5f f2 ce 58 bf e7 9f f1 7d ea fc 96 18 5f fa 78 e4 7e d9 3c 6c e1 f6 4e b6 e3 c5 11 bc 32 c7 71 fb ab 88 a2 fd d5 d4 5f e7 f3 a6 78 5e f7 5a fb 6c 56 f6 73 ff 00 aa 97 f7 5f be ff 00 59 f2 7f e8 15 cc 59 a7 fc 4c e5 b7 bc f3 bc bf f5 92 f9 53 7f ac dd f7 68 bc 4b db 3b c9 63 d3 e7 f3 7f 7b fe 8b 2f f0 49 fd d5 a3 fb 32 8f c3 18 99 fd 76 b4 bd e9 1b 77 1a 3e c9 a5 bc b7 9e 18 ae 22 fd e4 bf f4 ce 2a 7f 87 de 28 60 f2 f5 0f 27 fb 3e ea 5f f4 a9 7f e7 a7 ff 00 65 59 b1 dd 7d 82 68 ae 2d ef a6 97 fe 59 cb 17 f1 c7 e6 7d ea 65 bc b2 7f ab fd f4 b1 cb ff 00 4c 7f 8d 7f 8a b4 f6 Data Ascii: ZG]9nmeQ/ofo!KI]&ye$>TA4_X}_x~<lN2q_x^ZlVs_YYLShK;c{/I2vw>"*(`'>_eY}h-Y}eL
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: a8 e1 d3 6d 2f 2d ef bc db 3d 52 eb cb ff 00 af 7a e4 fa e4 21 3f 7a 5a b1 fd 57 da c3 dd 31 3f d0 be db e6 79 1f e8 ff 00 eb 3c aa 64 71 59 3c 32 db dc 79 d1 49 15 d7 fc f1 ff 00 96 4d f7 ab 62 4b 2d 3a 1d 52 5b 3d 42 79 ee bc af dd f9 5e 4f cf b3 fe f9 ab 3a 86 8f 12 69 7f 68 93 ec 57 52 79 52 47 14 5e 47 fa cf 9e 8f af c2 24 7d 4b 9b de e6 45 38 e5 b2 b9 b2 8a ce 4f 3a 29 3c df de cb e4 ec fb 44 55 0f f6 7d ba 7f a4 47 7d f6 58 fc af 32 29 65 ff 00 c7 fe e5 4d 1a 59 41 0f f6 5d e4 ff 00 bb 96 ea 3f 36 59 61 ff 00 49 b7 7f f6 6b 57 47 f0 7f da 75 3f b3 de 6a bf 65 b7 ff 00 9e bf ed c9 fe af ee ff 00 b5 44 f1 b0 a1 0e 69 55 b1 b7 d5 67 88 f7 7a 94 23 f0 bd cf fa cd 3e fa ca eb ed 52 f9 71 45 ff 00 8f ee f9 a9 97 9e 1f d6 be dd 0e 9f 24 1e 6c 92 cb ff 00 Data Ascii: m/-=Rz!?zZW1?y<dqY<2yIMbK-:R[=By^O:ihWRyRG^G$}KE8O:)<DU}G}X2)eMYA]?6YaIkWGu?jeDiUgz#>RqE$l
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 90 39 a7 76 59 f0 db c9 0e b5 15 c4 93 c3 2d bc 52 f9 72 fe fb fb bf 33 57 b0 7c 40 b8 93 c3 de 05 d2 bc 08 3c e8 e4 d7 ad 53 5b d5 7f e7 b4 7f f3 c2 27 fe fa ff 00 15 66 fc 17 f0 94 7e 24 f1 36 95 a7 c9 07 fc 4a f4 bf f8 99 6b 57 52 fd c8 d1 3e 77 ff 00 be a9 9e 28 d7 62 f1 3f 8e b5 ff 00 14 5c 7f ab ba 97 fd 54 bf f3 ef 1f cb 14 55 c5 1f b5 5f 66 7b 2a 9b a7 38 43 74 bd eb 16 74 7d 6e 4b 68 21 d3 ed e0 82 2f b5 79 91 cb 2f dc f9 63 af 37 f8 81 ab 7f 6a f8 82 ea f2 df fe 3d e2 ff 00 55 17 f0 6c 5f f3 cd 6f 78 e3 53 fb 06 97 a7 dc 79 1e 55 e5 d7 99 e6 f9 bf 27 ee 9b fd 5d 70 77 17 bf f2 f1 1f fa c9 65 af 3f 07 87 f6 d8 9f ac 47 6d 83 30 75 a3 0f 61 e7 7f c0 9a dd 7f e5 9f fa d8 fe 7f fc 7a a7 b7 f3 3c ef de 41 37 99 2f fb fb 2a 39 2e 23 4d 53 fb 3e 4f de Data Ascii: 9vY-Rr3W\|@<S['f~$6JkWR>w(b?\TU_f{8Ctt}nKh!/y/c7j=Ul_oxSyU']pwe?Gm0uaz<A7/9.#MS>O
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 37 d8 ed 65 f2 fc df 3b fb af 56 6f 21 8a e7 ed 51 c7 63 e5 7e eb cb ff 00 53 fe dd 47 25 1f 87 97 62 ff 00 bd 1e a4 37 97 bb 34 bf b6 47 fb ab 89 65 f2 e5 97 ff 00 1e a9 b4 bd 2a f6 ff 00 cd 92 39 ff 00 d5 45 e6 45 2f fe 3d 50 d9 da 47 0d ee ab 1f 91 fe 8f 6b 75 e5 ff 00 df 3f 36 e4 a7 f8 7f c4 12 43 e5 47 6f fb af 2a 29 23 ff 00 ae 9f ed d5 d6 f6 dc 92 f6 1b 98 f2 51 8c fd ed 86 6a 16 97 16 da 2c 51 c9 07 fa 3f fa cf fb 6b f7 aa 1f b4 6f 87 cc fd f7 ef 7f e5 95 32 4b a9 12 1f f4 89 e6 96 3b af f8 1d 43 ae 5a 5c a6 97 6b 1d bc 1e 6d c7 fa c9 7f e9 9e ef e0 ff 00 81 56 b4 f9 fd de 70 f6 30 2e 49 77 17 93 2c 71 ff 00 ac ff 00 3b fe ed 32 f2 ee 48 75 4f 2f fd 6f 9b 59 52 5a 5e bd ef d9 e3 82 68 bf e9 af fc f3 ff 00 81 7b 55 9d 62 6b 9b 9d 52 2f b4 41 e5 7f Data Ascii: 7e;Vo!Qc~SG%b74Ge9EE/=PGku?6CGo)#Qj,Q?ko2K;CZ\kmVp0.Iw,q;2HuO/oYRZ^h{UbkR/A
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 2e 61 86 eb ed 10 79 52 4b e6 7f c7 df f7 eb ad f8 7f e2 5f f8 47 a1 97 cb fd ef 9b 17 99 14 5f 71 fc da 67 f6 87 f6 94 31 5e 5c 4f 65 17 da a5 fd ec 52 cf f2 7e f3 ef 6e a6 49 a7 c6 f3 7f 67 dc 4f 0c bf eb e4 f3 66 ff 00 96 7f e7 f8 6b cf c4 d4 a9 8a a3 ec eb c4 ea a3 46 14 bd e8 c8 f6 3f f8 4f ad bf e1 5b da f8 7f 4b f0 ae a9 a5 d9 cb e6 7d ae ea 29 93 ce b8 4f f5 9f 37 f1 6d dd 57 fe 0b e9 be 18 f1 55 8e a1 1f 86 e0 9a c3 5c 8b 65 cc 5a 54 df f2 de 2f ef c7 5e 5d fd b1 a8 a7 88 2d 64 b8 9e 1f 2e 5d 3e 0b 6f 36 59 bf d5 a2 ff 00 bb fc 55 af e1 0d 27 5d d2 2f 34 5f 13 f8 73 54 82 3b b8 e5 4f b2 cb fc 1f 33 fd dd b5 db 97 e6 4e 5c b8 5a f0 51 be de 6c da a6 1b e2 78 6a af ce e6 ce b9 aa e9 37 36 51 5e 7f 6a ff 00 a3 cb e6 79 51 4b 5c cc 9a 6e 89 aa f8 47 Data Ascii: .ayRK_G_qg1^\OeR~nIgOfkF?O[K})O7mWU\eZT/^]-d.]>o6YU']/4_sT;O3N\ZQlxj76Q^jyQK\nG
2024-11-25 15:32:11 UTC	16067	IN	Data Raw: 29 7e ff 00 cb 5e 9f f1 07 4c b9 9b e1 8f 81 52 49 e1 fe d0 d3 2e a7 b2 96 2f f9 e9 fd da a1 2d b6 9f ac 58 da de 4b 37 99 71 17 ee e5 f2 be fc 9b 9f cb ff 00 be ab c7 c0 67 f1 8e 1e 32 a8 b9 9c 9c a3 f7 4a c8 ee cc 32 9f 7b d9 47 4d 11 c1 6a 1e 64 d0 fe f3 f7 52 79 b2 47 2c 5f 73 cb dd fc 34 cd fb ff 00 77 79 fe ae 5f 2e 3f de ff 00 7d 7f bb 5d bf 83 fc 09 7b e2 df 0c eb fe 20 b3 be fd e6 8d 2c 11 4b fd cb bf 9d d2 5f fb e5 6b 53 c2 ff 00 0f f6 78 b6 5d 1f fe 3f fe df a5 49 f6 58 a2 fb f1 ca af fe b3 e4 fe 1a fa 0c 36 6d 46 b4 a5 4a 96 b3 83 d5 76 3c af ec 9a d0 e5 e7 f8 5f 53 86 ff 00 84 7e f5 fc 23 fd b9 67 fb d8 ed 62 92 4f f6 fc af e3 7f 96 b4 fc 35 e0 a9 3c 5b 67 af de 68 9f e9 4f 2c 5e 65 84 50 ff 00 cf 5d 9f 75 ff 00 bb ba bd d3 c7 1e 1d f8 6b f0 Data Ascii: )~^LRI./-XK7qg2J2{GMjdRyG,_s4wy_.?}]{ ,K_kSx]?IX6mFJv<_S~#gbO5<[ghO,^eP]uk
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 5e 5b ab 7c 46 f1 55 dc df e8 7e 4d ac 71 0f 33 ca 8e 24 35 95 19 54 a9 ef 53 87 29 bd 6a d5 a1 ee 4a a1 53 4b f8 6b e0 b9 a1 8a 3b 7b 1d 52 2f 36 5f dd 7e e6 ba 9b 7f 87 de 1c d2 61 f3 2e 26 86 3f f9 67 17 da af 3f 83 fd 9a e2 a7 d7 fc 4d a8 db ca 35 3d 52 69 3c df f9 e3 bd 3f e0 15 43 c9 8f fe 3e 23 82 19 64 97 fe 5a cd 5d 1c b5 27 f1 4c c3 df 3b cf b1 7c 3f b6 ff 00 59 ad d9 4b 24 bf ea a2 8b f7 d4 91 f8 97 c2 36 1f e8 76 5e 22 9a 3f 37 fd 6c 56 96 75 c3 db fd b6 68 3c b8 ff 00 e3 df fe 5a fe e7 65 1b e3 87 f7 72 7f df aa 8f 61 1f b4 cc 67 f0 73 44 ec e5 f1 2e 8d e7 7e f2 cb 5a bf ff 00 c7 12 99 6f e3 7b 9b 68 64 93 4f f0 96 9e fe 67 fa a9 6e 67 f3 73 5c f4 7a ac 70 c3 e5 c9 63 37 fd b5 fb 94 5c 5c 47 34 f1 49 6f fb af f9 67 fe a6 b3 71 4f 78 85 36 fe Data Ascii: ^[\|FU~Mq3$5TS)jJSKk;{R/6_~a.&?g?M5=Ri<?C>#dZ]'L;\|?YK$6v^"?7lVuh<ZeragsD.~Zo{hdOgngs\zpc7\\G4IogqOx6
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 86 4e a1 ac 6c bc f3 23 9f cd 8f ec b2 79 52 ff 00 1c 9f f0 2a cd b8 f1 1f f6 97 d9 6c ee 20 9a 59 2d 7c bf b5 7e e7 ff 00 46 56 3f 89 35 08 ff 00 e1 20 8a de de 79 bf d0 22 ff 00 55 2f ce 9f 37 f9 e2 b3 6c fc 45 70 9e 6f d9 ec 67 96 4b 08 a4 92 2f 36 6a fb bc 3d 19 62 30 fc ef e2 4b ee 3c da d8 c8 42 bf 24 34 47 a7 6a 1a c4 9e 75 d7 db 27 87 cc ff 00 96 5f f5 d6 b3 af 35 bd 3a 7f ed 4b 8f 3f fd 0f cd f3 22 f3 7e 4f 2d a2 4d b5 9f aa 43 a8 e9 5f 0f 61 d7 3c 9f de 4b 75 1f 95 f6 5f bf b6 4f 9b f8 ab a2 b7 f0 76 9d 6d 35 d4 9f be fb 39 89 3e d7 6b ff 00 3d 2b f3 48 4b 05 85 bc aa b6 f5 69 5b c8 fa 2e 7a b5 79 63 1d 11 c4 68 71 7d bf 54 d5 74 bb cf b6 cb e5 6c b9 ba ba f3 b6 7e e9 bf 82 ba 2f 87 7a 0e 82 ba 2c da a4 56 3f f1 f5 2f ee a5 97 e7 fd d7 dd fe 2a Data Ascii: Nl#yRl Y-\|~FV?5 y"U/7lEpogK/6j=b0K<B$4Gju'_5:K?"~O-MC_a<Ku_Ovm59>k=+HKi[.zychq}Ttl~/z,V?/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49755	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	375	OUT	GET /th?id=OADD2.10239355322789_1NJJE89Q6EOBYU560&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:10 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 811239 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F2FEB36422D143F9AB6542CC6710798B Ref B: EWR30EDGE0917 Ref C: 2024-11-25T15:32:10Z Date: Mon, 25 Nov 2024 15:32:09 GMT Connection: close
2024-11-25 15:32:10 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1b fe 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 38 3a 31 32 3a 34 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 18:12:448
2024-11-25 15:32:10 UTC	16384	IN	Data Raw: e3 d3 53 d6 8c 61 0d 62 ac 87 6b 97 9a 96 95 0f da 9f c4 9a 7d ed dc 7b 27 96 3b 1d 9e 72 2b 7f b6 bf 7b 07 6f fb bf dd ab 16 b7 7b fc 33 26 9d 34 d3 47 f6 89 3f d2 64 93 ef dd a7 de fb 9f e7 6f fc 0a ac 69 b6 ba 36 95 ab 69 3a 7b cd f6 88 ec a4 fb 47 9b f2 3c d3 ec fb e9 f2 b6 cb 64 ff 00 6b 2d fd e3 f3 7c b5 05 8b f8 6e 29 bf e1 24 f1 24 17 67 4e 92 47 93 4d d3 44 bb de e3 67 f0 c9 bb 9f 28 7f 79 be f5 3a d2 6d 25 4f 44 c1 b7 74 ee 27 d9 a3 b4 8a 37 9f ca 8d 24 8f cc fe fb f9 5f c2 8a bf fc 55 5f b1 8a ff 00 c9 8f 50 bb d4 a2 b2 b5 f2 ff 00 d1 e3 8e 24 7b 9f fb e7 a5 63 ea 57 df 68 f3 26 9e d2 2d 3e eb 50 b8 f3 ee 2f 6e 62 f9 e4 89 be e2 c2 9f c2 bf e4 52 cf e2 3b bb 5d 3e 3b 2b 28 7e cf 04 72 24 92 79 51 7f ac 75 4f 93 fe f9 af 3f ea ee 4b 7b 7c 8c 39 Data Ascii: Sabk}{';r+{o{3&4G?doi6i:{G<dk-\|n)$$gNGMDg(y:m%ODt'7$_U_P${cWh&->P/nbR;]>;+(~r$yQuO?K{\|9
2024-11-25 15:32:10 UTC	16384	IN	Data Raw: 7f cf 5a 9f 5c d1 7e c9 77 1a 5e f9 b6 f1 ff 00 ac fd d7 ff 00 15 fc 55 bd 05 8c f6 9a 4f f6 8a 5e 5a 6a 3a 6f 98 fe 65 b7 9b f3 db ff 00 bf 1f de 4a e6 35 cd 5d f6 c9 a4 3c 5e 62 79 be 64 57 1f 6a ff 00 57 17 f1 45 ff 00 7d 74 7a f5 2b 50 a9 57 96 b4 74 5d 57 ea 8f 3b 77 72 78 ef a0 ff 00 8f 2d 7b fe 26 30 7f cb bd cc 51 7f a4 41 fe 7b d5 0b ab 6b 8d 2b fd 2a ca 6f b4 69 52 7f ab b9 ff 00 3f 76 a5 ba 97 ec f6 91 c1 04 31 5b cf 1c 9f bc b9 fb ef ff 00 02 5f ef 53 74 9b cb eb 2f 33 c8 87 4f b8 8e e3 fe 3e 23 ff 00 96 33 ff 00 f1 2d 58 72 38 bf 77 ee e8 67 35 62 d6 9b aa ff 00 67 c3 27 91 0c 3e 5d c7 fc f5 ff 00 96 7f f0 1a 9e 6d 3e c2 6f f8 9d 41 ac 7d 9e 4f fa 6b 2f ee 77 ff 00 77 fd 8a ce 92 c6 dd bf e4 11 0f ef ff 00 e5 e7 4e b9 fb ff 00 f0 1f ef 55 5d Data Ascii: Z\~w^UO^Zj:oeJ5]<^bydWjWE}tz+PWt]W;wrx-{&0QA{k+*oiR?v1[_St/3O>#3-Xr8wg5bg'>]m>oA}Ok/wwNU]
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 7d af c8 8f 7c fe 5c 5f f2 d1 bf e7 a3 76 75 4f e1 5a f1 f3 0c c1 c7 9a 8d 27 67 d5 f6 2e 11 6e 49 20 fe c1 9e 5f 0e ff 00 68 3d e4 3f 6e bc b9 4f 2e 3f f5 df 67 55 f9 f6 c8 df 77 cd 6f ee af cc 9d ea 0b 5d 42 c6 df 50 93 c9 9b fb 46 fa e6 e7 fd 36 58 e2 77 78 3f bf f2 2f 76 fe f7 f1 56 9d d4 5f 6d d5 ae 61 86 f3 ec fa 6c 71 ff 00 a1 5b 5b 4a 8f e4 5a af f7 b7 7d e6 7e f5 24 0b 61 77 69 f6 2d 22 ce 18 ec 7e 4f 33 f7 bf 3c 9b 7f e9 af f7 6b e6 e7 8c 8d 24 e0 dd e2 ba 2d 17 cd ef f2 35 e7 54 96 8c 2e ac de f4 6f 7f dd da db fe ef fb 8f 76 cd fd df f7 7b d4 50 5a 41 a9 4d 2c 2f e6 d9 69 b6 f6 cf 24 91 cb 2b f9 33 ff 00 b3 23 7f b4 dd 2a d4 92 bc b3 46 8f 0c 57 16 31 ec 8e 4f 2f 7e c9 db 67 dc 56 fe 04 55 ff 00 be aa 4b 8d 72 4d 4b 4f 93 4e 4b 3f 2e c7 ed 3f Data Ascii: }\|\_vuOZ'g.nI _h=?nO.?gUwo]BPF6Xwx?/vV_malq[[JZ}~$awi-"~O3<k$-5T.ov{PZAM,/i$+3#*FW1O/~gVUKrMKONK?.?
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: e5 57 5f 7d 06 f8 76 55 1f b1 c6 95 df 43 1c 9c 7d ed ce 4a b8 47 7d 36 39 e9 e2 91 ea 09 e0 ad b9 20 d9 f7 2a af d8 67 79 bf d4 d7 a1 1c 54 63 1b b7 63 8d e1 e4 da d2 e6 24 fa 7f 9b 55 63 f0 aa 4b 37 cf 34 d5 d7 c1 a4 49 fc 75 6a 3d 2b 65 72 cf 3b 9d 3f 76 9c cd 56 4f 4a ab e6 a9 1b 97 e7 f0 f4 92 f8 37 4d b2 79 a1 8e 0b 78 fc ba d2 f0 fd ae 9b a3 e9 fe 42 4d 37 fd 75 fe 3a cb 8f ed 7e 4f 91 57 34 3d 22 76 d4 23 df e7 57 cd d4 c4 4e 54 dc 6a 4f dd bd ec 7b d4 e8 a8 c9 38 47 5b 58 f4 9f 03 cb 24 b0 cb fb 9f dd d7 5f 1f c9 0d 61 f8 62 08 2d ed 23 ff 00 9e 95 d0 c7 e5 f9 35 f1 d8 89 a9 54 6d 1f 41 4a 3c b1 2b cf 55 ae 16 4a bd 3f fb 15 46 7f 3e b0 34 19 bb 67 cf 53 c1 3e fa 6c 6a 92 c3 ff 00 4c e9 d6 b1 24 54 0d 2b 96 24 f9 ea 86 a5 04 12 c3 26 fa 96 79 f7 Data Ascii: W_}vUC}JG}69 *gyTcc$UcK74Iuj=+er;?vVOJ7MyxBM7u:~OW4="v#WNTjO{8G[X$_ab-#5TmAJ<+UJ?F>4gS>ljL$T+$&y
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 7e e6 4a e9 60 d6 34 2d 4a 1f b1 4f 34 de 5f 97 fb cb 6b 98 bc ef 9f fd 85 ac eb 86 83 50 f2 de 7f 26 39 24 ff 00 96 7f 7d 3f fd aa 8a 7d 22 c7 cd f2 e7 87 ed 12 47 1f ee e3 fe 3f fb ea a6 7c ad df 66 37 66 fb 1b 36 3e 1e b4 96 68 ee b4 8f 3a cb fe 79 f9 5f 3d b4 9f ef c6 df 37 fd f3 54 35 2b cf 12 68 9e 65 d6 a9 0c 57 10 7f cb 3b 9f 9d ed b7 ff 00 c0 7e 64 6f f7 aa ac 96 3a 96 9f 69 f6 a8 26 9a e1 3f e5 a4 72 c5 ff 00 8f 2f f5 aa 16 fe 2c d4 f4 df dc 4d e6 f9 12 49 ff 00 2d 7e 74 ad 23 cf 35 67 ef 44 d6 32 ba b3 d5 9b 3f 66 f0 f6 bb a4 fd b6 6d 0b ec ef 24 9e 5d c4 b6 df 72 39 7f 95 4a bf db 3a 2d af f6 76 93 3f f6 87 fc f2 b7 be df f7 7f e9 97 f0 7e b5 cf 68 7a 85 a7 9b 72 f6 b3 43 a7 4f 27 ee e4 8f e7 4b 6b 8f f6 7f d8 ad 4b 59 ef ad f4 ff 00 ec ed 5e Data Ascii: ~J`4-JO4_kP&9$}?}"G?\|f7f6>h:y_=7T5+heW;~do:i&?r/,MI-~t#5gD2?fm$]r9J:-v?~hzrCO'KkKY^
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 7d 8a db cd d8 ff 00 ef b7 fb 35 95 7e 5a 14 e4 e0 f5 96 9e 66 d4 e3 08 37 6d 5f 42 d7 8a af 2e f4 5f 09 c7 64 f7 97 7a 8c 91 f9 d7 1f 69 8b fd af bb fe f3 57 07 e2 db eb 1f f8 46 77 dd 59 cb 26 a5 25 ca 49 73 fb dd ff 00 22 fd c8 fc bd bf fa 0f e3 5d 1e ab 67 7f a8 45 73 05 97 93 e4 5b 7f cb 4f 2b f7 31 ff 00 7a 46 ff 00 d9 7f bd 54 3c 2b 69 e1 7b 7d 3f fb 47 ec 71 6a 3e 64 6f f6 6b 9b d9 9f f7 6d f7 7c dd 9f e5 6b 8b 0c e1 4a 3e d1 ab ca fd 3f 27 d8 7c bc ad 0d f0 ee b8 67 d2 77 bd 9d ad c5 f4 91 a4 ff 00 bd d9 b2 d1 5b ee 3b bf f1 fb 55 78 d7 fb 3f 4f d9 fb ab 7b 1b 28 ff 00 77 1f 95 fb e9 1b f8 9f fd df f6 6b 1b c5 ba cc eb 77 65 65 7b 37 99 e6 48 91 f9 9e 57 92 91 ed ff 00 63 fb 82 a7 d5 9a 39 6e ee 52 3f 36 e2 09 24 4b 7b 6f 36 5d 8f 22 2f f1 c9 5d Data Ascii: }5~Zf7m_B._dziWFwY&%Is"]gEs[O+1zFT<+i{}?Gqj>dokm\|kJ>?'\|gw[;Ux?O{(wkwee{7HWc9nR?6$K{o6]"/]
2024-11-25 15:32:11 UTC	16065	IN	Data Raw: ac 9e 5e cd 4a d2 4f 2f fe 99 56 86 9a d7 fe 76 cb d9 ad 3f ed 94 b5 2c 13 c0 f0 fc 94 97 4d 02 4d bf c9 a9 72 6c 6a 29 13 5f 41 77 f7 e0 9b f7 74 ed 25 a3 b7 f9 ee a6 ff 00 bf b5 15 ae ab 1a 7f cb 1f dd d5 af b6 5a 4b ff 00 2c 6a 5d ed a9 7a 74 2e cf 3e cf 9d 2a bd f4 52 6a 10 ec 9f f7 7f f5 ca a2 fb 4c 09 51 4f aa a7 f0 4d 51 18 bb dd 03 6a d6 65 88 22 4b 48 63 81 3f e5 9d 52 d5 2c e3 bd f9 3c ef 2e 3a 8a 4b ed f4 d9 2f b6 43 23 ff 00 cf 3a d5 29 a7 73 39 4a 36 32 24 f0 bc 69 77 f2 7f ab ad 7b 1d 2a c2 df e7 f2 61 ac 3f f8 4a 24 b2 b3 91 ee bc eb 89 3f e7 9d 63 49 e3 1d 4a ee 1d 8f e4 ff 00 db 2a e9 e5 ad 25 a9 97 35 38 9d 6f 88 da c2 2b 49 77 f9 3e 65 79 bd d2 c0 f3 49 e4 7f ab a2 fa 79 e6 9b 7c d5 0f 9b b2 b7 a7 4f 91 6e 63 39 73 32 68 e2 a6 49 14 94 Data Ascii: ^JO/Vv?,MMrlj)_Awt%ZK,j]zt.>RjLQOMQje"KHc?R,<.:K/C#:)s9J62$iw{a?J$?cIJ*%58o+Iw>eyIy\|Onc9s2hI
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 53 d6 bc 4f 71 67 ab 6f d4 c7 9b 20 eb 1c 52 ff 00 17 f7 69 bf 0f e1 92 3d 03 fd 0a 19 6e 64 b8 de f2 47 fc 68 9f ec ff 00 56 ad d9 3c 0b a4 a5 a5 cc fa bf ef 24 f3 21 fb 17 d9 a5 df e5 a3 7f 7d 7f bb 51 39 61 e9 d4 7c cb ee 29 28 a6 3f c2 b2 ea 5a df da 61 79 ad 23 82 3b 6f f5 91 7f cb 3f f6 3f da ff 00 80 d4 b7 cb a6 e8 5e 13 be 7b 5f ed 0b 8d 4b e4 ff 00 49 8b 66 cf 9b fd 95 fd 3f bb 56 63 b1 82 d7 49 92 ca ca 1f 32 d7 cc 48 e3 92 db 7f ef 3f df 6a d0 d1 6c e0 83 c2 9f da 7a b4 de 5d ac 7f bc b8 92 2f 93 e7 5f bd b6 b8 a7 25 cc a5 0f 85 b5 a2 ea 6d 46 92 91 8d e0 3d 06 4b bb bf b7 6b da 8d dc 97 5f f2 cf cb 95 3f d0 3f de df bb f9 56 8f c4 1f 14 e9 3e 1a d3 e2 b1 d2 2f 3e d1 75 ff 00 4c e6 fb 43 7f bd bb a6 ea e7 7e 24 6b 57 0f e6 6a 9a 5c 1a 85 9c 11 Data Ascii: SOqgo Ri=ndGhV<$!}Q9a\|)(?Zay#;o??^{_KIf?VcI2H?jlz]/_%mF=Kk_??V>/>uLC~$kWj\
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: ef a3 b7 fb 15 25 8c 1a 15 ec d2 e9 f7 ba bf 99 3f fc bb 5c cb 16 c8 5f fb bb bf 8a b5 9e c6 d3 52 bc f3 fe c7 ff 00 1f 1b e3 b9 d3 6d bf e5 a7 fb 51 ff 00 b7 5c fe a5 a6 bd 84 5e 66 9f fb c8 ee 63 fd df 99 f7 f6 ff 00 14 4f fe d2 d1 19 a9 e8 de a4 c5 5d 2d 4c 9d 63 4e 7d 3f 55 92 d6 f6 28 bc cf 91 fc cf e0 7f f6 b7 d5 39 ad 61 8b e7 7f de 3f fc b3 ae 97 4d d4 ec 35 2d 27 fb 3f 56 d3 62 92 48 ff 00 e3 da e7 cd d9 e5 ff 00 b3 b6 99 7d a3 5f 59 79 b7 50 da 5a ec 8e 4d 9e 5f 95 bf cb 56 fe f7 f7 71 5d 31 af 25 ee cb 73 4f 69 24 f7 2a f8 5a e7 ec f3 7f a2 cd 2c 72 7f cf 39 3f f6 5a e8 af af 2d 25 f2 e0 9e 19 bf 79 1f ee fc a9 be 4f f7 5a b9 1d 71 53 4f b4 b7 78 61 f3 3e d1 ff 00 2d 3f f8 9a 9f 4e bc 8e fb 49 8e 1f 27 f7 f1 ff 00 cb 4a 8a 94 54 9a 99 2e 2d ae Data Ascii: %?\_RmQ\^fcO]-LcN}?U(9a?M5-'?VbH}_YyPZM_Vq]1%sOi$*Z,r9?Z-%yOZqSOxa>-?NI'JT.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49756	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	346	OUT	GET /th?id=OADD2.10239360608910_1R4TEUG1LRQY39K7S&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:10 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 594481 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A35C1D1F40CB4933B27D896E38B210B3 Ref B: EWR30EDGE0412 Ref C: 2024-11-25T15:32:10Z Date: Mon, 25 Nov 2024 15:32:10 GMT Connection: close
2024-11-25 15:32:10 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 32 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 33 3a 32 36 20 32 32 3a 34 38 3a 31 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.2 (Windows)2023:03:26 22:48:128C
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 46 bf c2 cb fe cf ab 35 1f 19 af 3c 1f 2e 93 a2 69 7e 10 9b 50 d4 64 b7 df 26 ad a9 5f 7c 9f 6b b8 fe e4 6b ff 00 3c 96 85 4d 4d b8 dd db d4 95 51 37 61 b6 be 2c fb 25 a5 cd 94 f6 7f 67 d3 75 6d 9f e8 d1 4d bf f8 fe f6 e7 ab 9e 2a b3 f0 7f 89 6d 3c 8f 0a 6b 17 71 dd 7f cf b5 f6 9e 90 ff 00 df 0e 95 c1 d8 f9 97 1a 86 fb a9 be d1 3f fc b4 fe e4 6b 5a 5e 11 9f ca f1 bc 7b 2f 21 8f cb fd df fd f5 47 b1 84 1b 71 d2 c6 91 a9 3b d9 6c 5e ba b1 fe c4 f0 cc 6f a8 c3 fb bf b4 f9 7f eb 7e 49 1d 7f 86 a8 ea 5a d6 99 77 35 ce a9 75 0f 97 3c 9f bb b6 b2 b6 ff 00 53 6f 5d ef 8d 3c 0d a5 69 5f 04 f4 ed 67 54 d7 0e a3 e2 6d 56 e1 ff 00 b2 74 2b 69 77 a5 85 aa bf cd 34 bf ed 37 6f ad 70 50 78 6a c2 28 64 9e f7 52 f2 e3 b7 8f cc 93 fd ff 00 f9 e7 1d 2a 5e ce 50 bf 35 ef d8 Data Ascii: F5<.i~Pd&_\|kk<MMQ7a,%gumMm<kq?kZ^{/!Gq;l^o~IZw5u<So]<i_gTmVt+iw47opPxj(dR^P5
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 6d 8f fa 99 12 b5 34 db 59 25 86 29 e6 fd e4 91 cb e5 f9 95 69 a5 a0 73 59 dc c6 fb 34 89 e5 f9 f5 d0 68 d1 40 f7 9a 6d af fc b3 92 b2 6f a2 df e6 79 7f eb 23 ff 00 59 1d 68 f8 56 79 22 fb 13 a4 3e 64 9f 69 f2 ff 00 e0 1b ea 2a ab a1 db 42 bf 8c 57 ca 86 47 4f dd fd a2 e7 cb ff 00 ae 9e 5d 41 a5 4b e5 69 fe 5f f1 d5 df 1e 41 3f fa 34 0f fe b2 df 7f fe 3c f5 9b 1c 0f 6f 0c 89 37 fa ca 23 67 4d 23 5b dc 2e a5 92 59 b7 a4 3e 5c 7f f3 cf fd da d4 f0 ae 99 06 ab a8 47 6b 3c 33 49 1c 9f f3 cb ef ff 00 bb 55 74 3d 2a ff 00 55 d5 a3 d3 ec ac e6 b8 9e 4a ed ff 00 e1 5d f9 5a e7 f6 5e 9f af 43 24 96 51 a7 f6 94 91 7f cb be ef e1 5f ef d7 3d 6c 44 20 f9 6f a9 93 92 4d c7 a9 9d 63 f0 f2 fd 34 3b 1b dd 46 68 6d a4 d4 64 7f b3 5b 79 bf 3c 69 1f df 69 7f bb 5e d7 a6 ae Data Ascii: m4Y%)isY4h@moy#YhVy">diBWGO]AKi_A?4<o7#gM#[.Y>\Gk<3IUt=UJ]Z^C$Q_=lD oMc4;Fhmd[y<ii^
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: cd 25 b7 99 2a 3a 49 f2 6d 47 db fc 2a 2b 07 e1 9e ab 73 e2 bf 18 5b 4f e2 df 08 4b ac e8 f1 cb 37 51 b5 3c f5 4f e2 6e 9b 56 b8 4f 0a fd af 4f f8 8f ff 00 08 87 87 be c9 a8 ea b7 11 a4 71 de c5 2e f8 63 f3 3e 66 7d df ec 2f fe 3d 5f 48 e9 5a 57 fc 22 5e 19 d2 74 88 34 78 af 75 18 ff 00 77 73 e6 cd f2 5b c5 27 dd 7d bf c4 ee df 35 79 99 9d 55 84 95 3a 73 b7 ba af cc de bb 79 5f 59 34 ac ba ea fa 58 f3 29 fb 49 bb be 85 1d 27 48 8e f7 49 fb 55 ac 5a 4e 9f ff 00 09 14 8f e6 d9 59 42 90 fd 92 df ee fe f6 4e a8 3f d9 ae 77 e3 67 8d 3c 1f f0 f3 c2 72 59 78 7a 6b 4b 8b ab df f4 48 fc bf f5 36 eb 17 fb 0b 54 3c 71 e2 1f 09 e8 fa 1d cf 85 f4 1b c8 63 d6 35 1d ff 00 bc ff 00 9f 7f 9f e6 66 7f e9 5e 37 e1 5f 01 47 6f e2 6d fa c4 d7 77 9e 66 c9 2c a4 8b e7 86 ed ff Data Ascii: %:ImG+s[OK7Q<OnVOOq.c>f}/=_HZW"^t4xuws['}5yU:sy_Y4X)I'HIUZNYBN?wg<rYxzkKH6T<qc5f^7_Gomwf,
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: aa e7 e7 f3 1b e7 ad 2f 07 34 6f ab 5b 23 cd e5 f9 92 24 7f bd fb 94 ea 24 e2 cc 65 66 b4 3e ca f8 11 ab ea 5f d9 32 69 7a 5d 9c d1 cf 26 9b e6 5c ea 56 d1 6c fb 24 4d fe ae 0b 7f fa 6a 56 bc 66 fb c1 9e 25 7d 5b c5 b7 4f fd a1 71 04 76 cf 71 f6 9b 19 7f 73 fe ec d3 37 fe 83 5e b5 e1 bb 1b bf f8 47 6c 52 d7 58 9a 4f 10 79 49 f6 9b d9 25 f2 6d ec 13 f8 df d3 85 e8 95 c3 d8 fc 4b d1 5f 5c be 4b ab cd 43 51 b5 d0 7f 77 a2 59 7f a9 b6 bf ba 67 ff 00 5f 3f fb 2b f7 bf da af cd f0 38 9c 54 ab 56 fa ac 6e 97 44 bc f7 5b 7c 5f 95 de cb 5c 61 07 05 b1 f4 1f fc 13 37 4b d3 74 2f 80 7a af 8a a6 86 38 ee 2f 6f 5f cc 92 4f bd b2 34 f9 56 bc 83 c5 5e 3d f1 2e a7 e2 cd 4b 4b 82 6d 5a 3b 5d 46 f5 e4 bd d3 ac 66 7d f7 1f ef 6d ff 00 d0 16 b9 7d 73 e2 7d fe b7 e1 ed 37 48 Data Ascii: /4o[#$$ef>_2iz]&\Vl$MjVf%}[Oqvqs7^GlRXOyI%mK_\KCQwYg_?+8TVnD[\|_\a7Kt/z8/o_O4V^=.KKmZ;]Ff}m}s}7H
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 6d e3 8a e7 fe 59 c5 1f f0 c7 5d 05 f6 95 77 6f a4 dc ff 00 65 cd 0c 70 79 6f 71 65 73 e6 ff 00 ac 97 fe 79 b2 d7 03 e2 ab 3d 75 e6 b1 b2 d5 21 b4 b2 d4 be d2 91 c7 17 f0 6c ff 00 9e 9e 62 d6 de 9b 3c f6 5a e4 8f ab ff 00 a4 49 1d b7 91 f6 2f 2b e4 d9 fd f5 ae 4a 94 9c 6c f4 77 e8 66 a9 cd 3b ad 8e 2e 4d 29 ed 26 be d6 f5 bd 62 6d 3b ed 12 bd dd b5 97 f0 6f 5f fe 2a b8 8d 62 fa ff 00 5d d5 ac 53 51 9a ef c8 b8 93 f7 71 ff 00 b0 df 7a bd 57 c6 3e 1a b4 b8 f0 f5 f6 97 7b 0d dd bf 89 be 49 2c ac ad a5 4f b3 79 4d ff 00 3d 37 fd c6 f6 ac 8d 63 4a f0 9e 9f 69 a2 7d b6 6f b3 ea 5a 74 7f e9 36 d5 df 43 15 18 c5 73 46 f2 d5 68 b6 b1 d1 4e 2e 36 5d ce af 49 d0 f4 df 06 7c 37 b9 d1 27 fe d0 b8 92 f7 f7 97 b1 c5 2f fc 7c 7f 71 7f d9 c5 55 8f c7 fe 0c d2 be 1b ff 00 Data Ascii: mY]woepyoqesy=u!lb<ZI/+Jlwf;.M)&bm;o_*b]SQqzW>{I,OyM=7cJi}oZt6CsFhN.6]I\|7'/\|qU
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: be 8f 2e 9d f6 78 e1 93 ca 97 ef c8 8f f7 3e 5a fa 8f c2 5f 10 7c 51 e2 b8 ec fc 37 e1 1f 0e c7 e1 fd 1e c2 cf 66 9d a2 db cd b1 ee e5 fe f4 af fa d7 43 71 e1 cf 11 e8 10 ea fe 3f f8 83 79 a1 ea ba 8d e6 94 96 f1 d9 49 2f fb 1b 43 2a d7 99 fd b3 8a c1 e3 a5 09 b8 b8 ca dc b1 eb a7 f5 ab 3b 14 69 ca 9f ee be ce 8d f4 3e 09 be f2 ed e6 8f 67 ef 3f e7 a5 6b 78 6d a7 bb f2 f4 ed 3b ce f2 ff 00 e5 a5 7a c4 ff 00 0b 64 ff 00 84 7b 56 bd bd d0 66 f3 2e 36 47 65 27 95 f2 47 fd ea af 6b e0 79 f4 ff 00 04 5b 5d 24 3f bc 92 47 8e e6 48 a2 fe 3f ee af fc 06 be 96 a6 61 49 25 1f 34 8e 2a 95 95 b6 2a fc 17 b1 d5 b5 5f 1b 68 9a 47 87 b4 d8 6f 35 cb 6d 47 cc b6 b7 ba ff 00 53 76 8b f3 37 99 fe ca 57 be f8 df c6 9a f7 c3 df 13 78 ea 7f 14 6a ff 00 da 90 5c e8 1e 5e 8b 71 Data Ascii: .x>Z_\|Q7fCq?yI/C;i>g?kxm;zd{Vf.6Ge'Gky[]$?GH?aI%4*_hGo5mGSv7Wxj\^q
2024-11-25 15:32:11 UTC	16067	IN	Data Raw: 65 a6 ff 00 c2 35 a9 43 25 d5 ec 7f 67 92 3b 69 7e 78 d3 f8 b7 d1 7e 74 d2 14 e4 9f 2f 2f 5d 0e cb c6 92 f8 3f c1 9f b3 2e 93 ac 69 7a 6d a4 93 de 69 a9 fe 93 17 df b8 ba 97 ef 6f 7f 6a f1 1f 86 ba ae 8b 6f a8 7f 6d f8 cb fe 26 30 59 47 f6 bb 6d 26 2f f9 7f 97 f8 23 95 bf 81 3d 6a d6 ab e2 5d 37 50 f8 01 6d e1 08 2c fc b9 2d f5 69 af ee 65 ff 00 79 36 a2 57 0d 03 58 c5 a4 fd aa 79 bc cb e9 24 f2 e3 b6 ff 00 61 7f e5 a6 ea cf 46 9a 4a c5 fb 34 e9 dd 9e 9b e1 9f 1e c7 a7 f8 f2 f7 e2 4d d6 9b a4 ea 33 c7 1b ff 00 66 d9 4b 17 fa 35 a4 ad f2 a6 c8 bf bb 1f 65 ae 37 43 57 f1 af 8b 2f 6e bc 43 a9 4d 1c 97 12 3d c5 cc 9e 57 f1 b7 f7 56 a2 f0 5f 87 b5 2b 8b 4b 97 f2 61 fb 2f 97 f6 b9 23 fe 3f 2b fb f1 d5 0b e6 d4 bc 3f a8 49 3e 9d 37 97 f6 8f f5 72 47 ff 00 2d 28 Data Ascii: e5C%g;i~x~t//]?.izmiojom&0YGm&/#=j]7Pm,-iey6WXy$aFJ4M3fK5e7CW/nCM=WV_+Ka/#?+?I>7rG-(
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: f9 72 47 fb b8 a5 ff 00 97 7d b4 68 fe 33 fe dd 8a da f7 fb 37 cb 8e df 64 71 fd a7 e7 f3 1e b9 4f 13 e8 7f f0 9a ea 1a 4e b1 7b e3 0d 3e 38 2f 63 f2 e4 f3 62 f9 ed ff 00 e9 9f fb 55 d9 68 ff 00 0d 74 98 bc 11 e7 ff 00 69 cd 7b ac 79 9e 5d b4 9f 72 d2 34 5f e2 6a db ea 94 a3 05 7f 8b a9 31 84 14 53 93 d4 a7 fb 41 78 a3 ed be 08 fe c7 8e f2 6b df b1 48 97 12 79 bf 23 c6 eb f7 3f e0 15 87 aa eb 9e 37 d6 34 fd 27 48 f0 f6 8f a8 c7 06 a3 65 0c 97 be 54 4f fe 9f 2c 7f 79 ff 00 dd af 46 f8 3b e0 9d 37 c3 9a 85 f5 eb d9 c3 e2 ab a9 24 fd df 99 2f ee 63 fe f3 cb bf f4 ad cb 5d 72 c1 2d 2f b5 7f 14 4d 0d 96 9b e5 fd 9f 49 d2 6c 7f d7 5d bf f1 7c ff 00 c1 0a d6 f4 69 52 85 35 a5 ec 6b 18 c2 ea 29 5f 5b 9e 63 a1 c5 27 85 f4 ff 00 2e f7 ed 71 fd b7 7f 97 73 fc 7b 1b Data Ascii: rG}h37dqON{>8/cbUhti{y]r4_j1SAxkHy#?74'HeTO,yF;7$/c]r-/MIl]\|iR5k)_[c'.qs{
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: d9 ab 33 5d 1d 17 77 6e 5d ef e4 71 ff 00 14 3c 4b 05 dd dc 9a 3f 83 6c ee f4 ad 0e 4d 92 5b 69 b2 cb e7 3d ba 7f d3 5f fa 68 dd eb a8 f8 0b e2 df 0f 78 33 e2 15 b7 88 7c 49 a0 dd eb 52 47 1f fa 35 95 8f df 92 5f f8 17 dc ad ab 1f 85 30 68 9f 6d 4f 14 6b df 67 8e ca 3f b4 6a 52 69 b0 fd a7 cb 7f ee 6f e9 5e f7 e0 9f 05 7c 3d f0 3f 81 74 9f 88 be 14 d0 b5 4b 3b 19 2d 92 4b df 15 eb 72 a4 33 08 9b f8 22 b5 7f bf be bd 58 d4 4e ea 2f 63 92 3c 93 4d 2e 87 2d a1 dd d8 78 83 e3 45 f6 bd a7 7c 37 d3 e3 f1 75 c5 b7 da f4 59 2e 6e de 68 7e d4 df 76 49 77 fd fd b5 f3 c7 c5 e9 f5 db af 89 ba b5 8f 89 2c e1 bc f1 35 e5 cf 97 73 27 9b e7 7f a4 7f 16 dd bf 95 7d 69 e2 0f 14 41 e2 bf 84 3e 28 7f 08 68 37 72 6a ba af 9d f6 9b db ef dc dc f9 51 26 e6 95 f6 ff 00 a8 88 7f Data Ascii: 3]wn]q<K?lM[i=_hx3\|IRG5_0hmOkg?jRio^\|=?tK;-Kr3"XN/c<M.-xE\|7uY.nh~vIw,5s'}iA>(h7rjQ&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49758	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:10 UTC	375	OUT	GET /th?id=OADD2.10239340418549_1ZU8FEFK0ERHP4923&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:10 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 746576 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 38A6A51994A74F21BD2857DFA035B5EF Ref B: EWR30EDGE0320 Ref C: 2024-11-25T15:32:10Z Date: Mon, 25 Nov 2024 15:32:10 GMT Connection: close
2024-11-25 15:32:10 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1a 3e 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 33 3a 30 33 3a 35 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``>ExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 23:03:528
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 5b 7f c3 7f 71 9f d7 f0 bf f3 f1 7d e7 a9 d1 5e 0f ac 7e d1 70 a4 72 2e 9f e1 89 bc cf e0 7b 8b 91 b0 ff 00 df 35 e7 1e 2e f8 a3 e2 af 14 f9 90 ea 7a bf d9 ed 64 1f f1 e7 a6 fc ab ff 00 d9 ff 00 c0 9a ba e9 64 b8 a9 3f 7d 28 af 36 63 3c d3 0e b4 8b bb 3e a2 d7 fc 5b e1 ad 10 e3 57 d7 b4 fb 37 fe e4 b7 28 1f fe f9 cd 72 d7 9f 1a 7e 1f db 8f f9 09 5d 49 ff 00 5c f4 f9 cf fe cb 5f 32 da ac 72 cd bf c9 9b fe fd 53 a7 d4 2c 2d 7e 4f b6 43 1c ff 00 f7 c5 77 43 26 a3 1d 1b 72 f4 d0 e2 9e 69 52 fb 25 f8 ff 00 91 f4 06 bd f1 ef c3 f6 f6 71 be 91 a4 ea 37 8f 27 4f 32 2f 29 7f 33 5c 37 89 3e 3d f8 ae 4b 5f f8 97 da 69 fa 7f fd 73 85 a5 7f fc 7b 8f fc 76 bc ba eb c4 b6 96 f7 9e 42 4d e6 7e ef fd 67 df 4a 82 7f 18 c7 e7 6c 4f fa e9 e6 7d cf 32 ba e8 65 34 62 d3 f6 57 Data Ascii: [q}^~pr.{5.zdd?}(6c<>[W7(r~]I\_2rS,-~OCwC&riR%q7'O2/)3\7>=K_is{vBM~gJlO}2e4bW
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 29 27 fe fd 36 79 7c af b9 37 fd 34 a5 ca ee 3f 69 08 c7 dd 64 fb 64 49 b6 3d 33 cd d9 37 cf fe af fe 99 55 5f 3e 34 f9 12 a3 8e 7f dc ec ff 00 a6 9e 65 52 a6 de e4 7d 72 11 49 22 e4 93 fe e7 62 4d 51 6e fe 34 ff 00 59 45 8d 9c f7 13 7e e2 1f 31 e3 ff 00 96 bf 72 99 32 c7 17 cf 24 d0 dc 3f fd 32 ff 00 e2 a9 29 42 2f 96 e3 a8 ab 28 a9 4d 5b 5d 3e 43 e4 93 7f fd 73 a3 76 df 92 99 e6 f9 5f 3a 43 0c 7e 5f fc f5 a7 ce df be f9 ff 00 79 e6 7e f2 4f f8 15 12 92 5b 22 a3 4d b5 29 2d 7a 7d e1 e7 c8 f3 47 bf f7 9e 5d 45 bb 74 31 a7 fc b3 a6 46 d2 3f 99 ff 00 3c e9 f1 b4 71 7d ff 00 fb 67 fb df f5 75 12 69 26 bb 0a 9d aa 37 29 bb f9 be a3 b6 bf 9d 1d 10 4b 1a 4d f3 d4 1e 6c 8d 36 f4 fd dd 4b 1c 11 f9 3e 7b cd fe b2 89 34 df bc 6d 19 ae 67 2a 43 b7 47 e4 ff 00 db 3f Data Ascii: )'6y\|74?iddI=37U_>4eR}rI"bMQn4YE~1r2$?2)B/(M[]>Csv_:C~_y~O["M)-z}G]Et1F?<q}gui&7)KMl6K>{4mg*CG?
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: f8 2c ec ff 00 ab 90 47 e7 bc 3f f9 0f f7 b4 f8 d6 0f dd a4 f3 7f cb 3f fb f7 4e 9d a3 9a 69 37 c3 ff 00 7e aa 28 16 44 fb ff 00 bc ad 25 17 6d 0b e4 71 7e ef 41 fe 44 0f fb f8 26 9a 3f 2f ff 00 40 a7 49 06 c9 bf f6 9c bf ed 53 a0 f2 fc ed 9e 4f fd 33 93 ff 00 65 a9 a4 82 ed e1 ff 00 a6 7f f3 d2 5a 8d 53 65 c6 54 d4 5c a5 1f 22 97 ee e2 9b fe 7a 7f e8 15 3c 7e 5a fd cf 27 fe 9a 53 7e cd 22 7e f1 e6 fd dc 9f ea ff 00 7b f3 d4 bb 76 4d ff 00 5c ea e5 28 bd 89 8c a4 93 bb dc 6e d8 ff 00 83 f7 95 14 7e 64 53 6f ff 00 96 72 54 fe 55 10 37 95 f3 bf 93 e4 7f cf 4f e3 a9 5b 33 46 b9 52 e6 64 12 3c 9f 7d e6 ff 00 59 49 1a ec ff 00 51 ff 00 5c fc cf e0 8e ad c6 d1 cd 69 b1 2c ff 00 77 ff 00 3d 29 9e 46 ff 00 f9 63 37 99 43 92 6a db 18 b9 d4 56 6b 55 e4 ac 41 f6 68 Data Ascii: ,G??Ni7~(D%mq~AD&?/@ISO3eZSeT\"z<~Z'S~"~{vM\(n~dSorTU7O[3FRd<}YIQ\i,w=)Fc7CjVkUAh
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: a6 cf a3 f3 47 5d 6a b1 73 e6 ba e5 d3 ad ff 00 1b 5c de b5 b9 8e 2b 4b 14 7f 3b 51 9e 48 fe d1 73 73 2f df 8f e7 ff 00 57 fe c5 65 cf 79 a9 5d da 49 f6 59 be d1 f6 7f f5 92 79 be 4c 36 8a d5 2d 8c f3 e9 9a 84 ba a7 fa 27 d8 64 8d ed 3e cd f6 bf f4 9b 86 91 3f 8b fd 9a 8a 7b ed 35 e1 b6 b5 ba f2 7e cb 25 b7 d9 e3 8f ff 00 67 ff 00 7b d2 96 1f 08 e8 d5 e6 8c 1c b6 77 df bd d5 bb af 2d c2 ad 4a 6e 11 55 25 ca 96 b6 fd 51 6b 74 0f a1 dc c1 f6 c8 6e 20 b2 bd 86 df cc 96 5f f8 f8 f9 3f e7 a7 4f bd 5c cc 7e 23 82 cb cb 9f 4e fd e4 97 11 cd 25 cc 92 fc f3 5c 6e f9 7e ff 00 f7 2a c7 88 af b4 df ec 3f b1 69 d0 c3 fb cd 92 47 fb dd e9 e5 2f fe cc 6b 27 52 d2 2c 2d 3c b7 ff 00 8f 88 24 93 f7 72 4b f2 43 27 fc 0a be 87 01 97 d0 97 34 aa b7 69 3d 15 bb 25 bf cf 5f f8 Data Ascii: G]js\+K;QHss/Wey]IYyL6-'d>?{5~%g{w-JnU%Qktn _?O\~#N%\n~*?iG/k'R,-<$rKC'4i=%_
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 00 6d 68 f3 e0 7f f9 6d 0d 3e 76 f6 42 94 22 a2 53 db 22 7f f6 da 74 92 cf 0c df eb aa d7 fa 22 4d f3 d4 71 f9 09 f7 3c e8 fc bf fd 01 a8 4d 6b 74 3b 27 a8 c8 e4 9d 26 ff 00 a6 7f 27 f9 fc 29 9f 6c 9d fe 47 87 f7 95 37 9b fc 1f f2 ce 89 2e 60 4f bf 35 36 d3 5c cd 11 29 45 a4 af ff 00 04 86 4f 31 fe 4f fc 87 44 6d b2 a6 f3 6d 1f e4 f3 bf ed 95 32 09 ed 1e 1f 92 8d 39 76 26 cb 71 f1 cb 3f fe d3 a7 47 3c 8f 0e c7 ff 00 96 74 41 73 68 f3 6c 82 68 64 a7 49 2e cf 9f c9 ff 00 a6 74 b4 72 d8 a8 a8 49 e8 3e c6 e6 48 a1 b9 82 79 be d1 1d c4 a9 27 fb 71 ed fe ed 3e 09 60 fd e2 4f 67 34 92 79 89 27 99 ff 00 b2 7f b5 4c fd df df 78 61 a6 79 b2 27 c9 ff 00 2d 23 a9 e5 83 6f 4f 52 fd a7 b3 b5 d7 4b 0d 9d a3 fe 0f 3b fe 9a 7f 72 9b 1a ff 00 02 7f ac a9 e3 59 1e 6f 92 1f Data Ascii: mhm>vB"S"t"Mq<Mkt;'&')lG7.`O56\)EO1ODmm29v&q?G<tAshlhdI.trI>Hy'q>`Og4y'Lxay'-#oORK;rYo
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: 3e 5d 4c b0 f4 a6 ee f7 5b 59 f7 df f4 12 a9 38 c2 51 be 8f 74 4d a9 6a 1f 6b b4 8e d6 78 61 8e d6 39 5e 48 e3 ff 00 e2 7b ee a9 23 bc 92 ef 43 92 0f f5 7e 5c 9f ea ff 00 f4 1a 83 c8 91 3f e5 b4 d1 c9 fe 7f 86 a2 8d 60 f3 b6 79 d3 79 71 d6 71 c2 d2 50 5c ab 67 71 73 3a 72 8b 5a bf 42 ac ff 00 6b 4b 4f f9 63 1c 9f fb 27 dd a9 52 e6 3f bf 04 3f bc ff 00 57 e6 45 53 c7 6d 1b ff 00 af 9a 68 ff 00 eb 97 dc a9 a3 82 04 9b e7 9b cc 93 e4 f2 e4 8a 2a e9 6e 37 5a 5d 8a a4 d4 9f b4 8b df 5b 6f b9 5e c6 5b 08 a1 91 27 b3 86 e3 ef fe ee 59 7f f6 5a 6e d8 12 1f 3d 21 fd ff 00 fe 8b ab 51 ac 0f f3 a4 3e 64 7f fb 3d 12 2e c9 a4 74 ff 00 59 51 74 d7 bd d4 d5 de d6 93 d0 cb fb 34 e9 77 b1 e1 fd df fa cf 2e 9d e4 79 b3 7f a9 ab 1b 76 79 7f f9 13 cd a2 36 8d e1 d8 9f bb 8f Data Ascii: >]L[Y8QtMjkxa9^H{#C~\?`yyqqP\gqs:rZBkKOc'R??WESmh*n7Z][o^['YZn=!Q>d=.tYQt4w.yvy6
2024-11-25 15:32:11 UTC	16065	IN	Data Raw: 9f 68 b5 d5 6d 9e 4f ed 69 62 77 7f 35 7e 59 a1 93 fe 9b 2b 56 54 71 91 a9 86 78 97 1d 52 d5 2b 3b 77 4d 27 7b f9 5b 5f cf d0 74 52 a8 a9 c6 ea f6 dd 5a fe 8f b2 d3 5d df de 71 df 14 2f b4 db 48 63 fb 2d 9d a4 93 c9 b3 cc fd d7 c9 bf f8 f6 d7 15 6b aa f9 be 6c 1f b9 f3 3e 7f f9 65 57 3c 79 67 69 6f a7 e9 b7 ba 75 e4 d7 1f 6d f3 bc cf 36 2f 92 df e7 fd d2 ff 00 b3 5c fc 13 df f9 3b 27 87 f7 9f f3 d2 b8 f2 da b4 b1 34 7d bc 53 d5 bd f4 6a cd a7 f9 1c f8 cf ac 53 a9 c8 e5 b2 5d 7a 1a 96 ad be 6d 9e 4f fc b3 f3 3f d5 55 8f 2a 37 9b fe 9a 56 1c 77 3a b4 5f 73 f7 7f bb 4f f5 5f dd a9 52 5d 4b ce ff 00 a6 7f fb 25 7a 57 70 7b 9c 70 a9 3b 5a d7 68 d9 75 fe ff 00 fe 8a fe 3a 6c 70 47 e4 f9 8f 0f fa bf fa 65 59 b0 cf a9 27 ce fe 77 fd 73 ff 00 3e 94 d9 20 bb 96 6f Data Ascii: hmOibw5~Y+VTqxR+;wM'{[_tRZ]q/Hc-kl>eW<ygioum6/\;'4}SjS]zmO?U*7Vw:_sO_R]K%zWp{p;Zhu:lpGeY'ws> o
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: b4 5b 47 f9 de 1f 2e 4f 2f cb fd ed 32 4d 0f 4d 7f 9d e6 87 fe b9 4b 0a 3d 67 2c c1 c3 e2 a6 ed e4 44 b2 ac 24 da 6e 4e fb 9e 0b 6b 67 1f fa 87 f3 bc b8 e4 f3 3f d5 7f 9f c2 9d 26 9e ef 0f cf e7 79 7e 67 f9 fb d5 ee d1 e8 b6 9f 7e 0b cb 4f fa 67 e5 45 55 ff 00 e1 1c d2 5e 1d ef 0c df f3 d3 cc 8b ff 00 89 a8 fe d4 8c b7 8b d0 d2 96 55 4e 13 f7 9a 7e 7d 8f 17 be 5b fb 89 b6 4f 37 99 24 92 27 fc b2 ff 00 e2 6a ac 7a 74 9f 73 f7 df bc ff 00 9e b5 ee 5f f0 8d 41 71 0e cb 5d 62 68 fc c9 3f e5 ac 49 fb cf fb ee 9b 75 e1 09 ff 00 78 e9 79 fe b3 67 99 fb a4 ff 00 d9 71 4e 39 85 18 ec ad e5 af f9 15 2c be 35 b9 9c 1e fd 6e 78 9d 8e 9b 68 f0 c4 ff 00 be f3 2e 36 47 e5 ff 00 1f df ab 17 7a 0c ef f3 f9 33 49 ff 00 a0 7f f6 35 e9 13 e8 32 3d df 91 05 e5 a7 da a3 ff 00 Data Ascii: [G.O/2MMK=g,D$nNkg?&y~g~OgEU^UN~}[O7$'jzts_Aq]bh?IuxygqN9,5nxh.6Gz3I52=
2024-11-25 15:32:11 UTC	16384	IN	Data Raw: ff 00 47 f3 dd 0f cf b7 fe 05 5c af 8e 3e 24 59 e9 3a 4c ba 75 ad e5 ac 97 5a 7e a3 6d 21 92 da 5f f9 64 ae be 76 ef 7f 5f ce b9 c5 f8 c1 a3 68 b7 5e 24 b9 d2 e2 9a f2 6d 47 5b 7b cd 36 e2 e7 fb ad 0f cb ff 00 01 57 8f 8f f6 6b 9b 03 c3 d9 bd 58 39 d1 84 b5 f8 74 d3 78 eb ae 9d 6f f2 7d 89 c5 e6 98 38 55 e5 a9 25 f7 9d 8e b7 63 25 a6 b9 a9 5e be b1 75 2f 99 a6 db 49 e2 8d 3b ca fd cc 9f e8 7e 5f da e2 ff 00 65 b6 7c df fc 55 73 1a b7 8d ac fc 3f 77 73 e0 ad 7f 52 fe d5 b5 b8 d2 66 83 4d b9 93 63 cd e6 ff 00 06 ed bf c6 1f cb 5f 9b b6 da f3 3f 12 78 c7 c5 9e 28 d7 2c ae a0 f3 6d e7 93 4d 9b 4c f3 2d b7 fe f1 37 99 7f f6 7f bb 51 f8 57 c2 1f db 5e 28 8a cb c5 9a 8c ba 57 f6 8d bb c9 6f 73 1e c7 96 36 54 fb df 37 dd f9 ba b7 f0 d7 dc 61 78 56 86 1e 93 9e 6b Data Ascii: G\>$Y:LuZ~m!_dv_h^$mG[{6WkX9txo}8U%c%^u/I;~_e\|Us?wsRfMc_?x(,mML-7QW^(Wos6T7axVk

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:11 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: ce6e3a8c-101e-0017-74b5-3e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153212Z-178bfbc474b7cbwqhC1NYC8z4n00000007n00000000068q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:11 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 215cf067-501e-008c-5fe3-3ecd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153212Z-174c587ffdfx984chC1TEB676g0000000650000000009a53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:11 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153212Z-174c587ffdf8fcgwhC1TEBnn70000000068000000000kf2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:12 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153212Z-174c587ffdf8fcgwhC1TEBnn70000000068g00000000gxv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:12 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 9ffa30f7-401e-000a-3a5c-3d4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153212Z-174c587ffdfx984chC1TEB676g000000061g00000000q0f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:12 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49764	13.107.136.10	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	1025	OUT	GET /_forms/default.aspx?ReturnUrl=%2fsites%2fAximClients%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F%253Ab%253A%252Fs%252FAximClients%252FEZAtYmCEsOZGtfivHr9tsMgBw1Wx%255FVRJQLySCr5DYzUrAw&Source=cookie HTTP/1.1 Host: bizcreditservices.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRiUzQWIlM0ElMkZzJTJGQXhpbUNsaWVudHMlMkZFWkF0WW1DRXNPWkd0Zml2SHI5dHNNZ0J3MVd4JTVGVlJKUUx5U0NyNURZelVyQXc=
2024-11-25 15:32:12 UTC	3801	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 888 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198%2D543A247679329D57074CAD955EC109BF35ABC7FE7D3BFE2D112DC94C111ADEC6&redirect%5Furi=https%3A%2F%2Fbizcreditservices%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=076267a1%2D10ee%2D7000%2D250d%2D02013a6824ec P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198=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; expires=Mon, 25-Nov-2024 15:36:12 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-3CA8A919066E5A9E6AFB48D03E6A15BF4D372C903DFA6198=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=U291cmNlPSUyRiUzQWIlM0ElMkZzJTJGQXhpbUNsaWVudHMlMkZFWkF0WW1DRXNPWkd0Zml2SHI5dHNNZ0J3MVd4JTVGVlJKUUx5U0NyNURZelVyQXcmUHJldmlvdXNSZXF1ZXN0Q29ycmVsYXRpb25JZD0wNzYyNjdhMSUyRDEwZWUlMkQ3MDAwJTJEMjUwZCUyRDAyMDEzYTY4MjRlYyZSZXR1cm5Vcmw9JTJGc2l0ZXMlMkZBeGltQ2xpZW50cyUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRiUyNTNBYiUyNTNBJTI1MkZzJTI1MkZBeGltQ2xpZW50cyUyNTJGRVpBdFltQ0VzT1pHdGZpdkhyOXRzTWdCdzFXeCUyNTVGVlJKUUx5U0NyNURZelVyQXc=; expires=Mon, 25-Nov-2024 15:42:12 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,525568,0,59,356807,0,146011,57 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 076267a1-10ee-7000-250d-02013a6824ec request-id: 076267a1-10ee-7000-250d-02013a6824ec MS-CV: oWdiB+4QAHAlDQIBOmgk7A.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=2851b1e2-2776-4ada-8128-f7823041467a&destinationEndpoint=Edge-Prod-EWR31r5c&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 50 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25430 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B880A00C72E5410DA7ED7376EBB63D35 Ref B: EWR311000106009 Ref C: 2024-11-25T15:32:12Z Date: Mon, 25 Nov 2024 15:32:11 GMT Connection: close
2024-11-25 15:32:12 UTC	888	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 65 36 30 37 39 38 30 63 2d 31 33 39 30 2d 34 61 65 62 2d 38 36 32 64 2d 38 37 32 62 34 32 65 36 61 30 36 65 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/e607980c-1390-4aeb-862d-872b42e6a06e/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49765	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:12 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vECD5cAxcUsO1K7&MD=WHsEyYh2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 15:32:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 42ab0a2a-a835-4584-9701-cf58ab0e9992 MS-RequestId: 843748c1-dc57-4e0b-8932-40269a867b0b MS-CV: KL1z7dOUfkOHLULv.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 15:32:12 GMT Connection: close Content-Length: 24490
2024-11-25 15:32:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 15:32:13 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49766	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:13 UTC	346	OUT	GET /th?id=OADD2.10239355322803_1JLJ9TG11GYY1CXIR&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:14 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 671319 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 1ADCF671B5764F84B195F256A2D3C3F3 Ref B: EWR311000108045 Ref C: 2024-11-25T15:32:14Z Date: Mon, 25 Nov 2024 15:32:13 GMT Connection: close
2024-11-25 15:32:14 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1b 54 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 38 3a 31 33 3a 30 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``TExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 18:13:098
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: c7 9b f7 7f f2 ce bc 0c e6 82 ad 4d 79 1b e5 f5 bd 9d 66 7b 35 ac fb 26 df 5a f6 2d 24 bf bc 7a e4 bc 39 a9 c0 f0 c6 8f 37 ef 2b a6 d1 e5 df f7 eb f3 fc 55 27 16 f4 3e be 8c 94 91 b7 63 73 b3 e4 ad 4b 59 64 7a cb 8f cb 7a d4 d3 56 bc b9 f7 3b 62 6a 5a b5 5d 4a ab 6a bb 2a d2 57 1b 37 44 9b bd e8 dd ef 51 ee a6 6f a8 29 bb 96 b7 d3 7c da 8b 75 33 7d 4f 29 49 dc 96 46 aa f2 35 12 35 47 23 53 8c 45 cc 31 da a2 92 9d 23 54 0e d5 64 86 fa 8a 4a 76 ef 7a 8e 46 a0 b6 ec 32 4a 8a 4a 74 8d 4d dd 54 41 4e ea da 4f be 95 9f 3a c8 95 b5 23 55 2d 49 77 d5 44 4c cc e6 a4 a6 c9 f2 53 a3 ab 62 1d b6 8a 24 6a 8f 75 20 24 dd ef 46 ef 7a 8f 75 27 9b 40 0f 91 aa bc 8d 44 8d 51 ce d4 ec 03 2e 1a a2 91 a8 91 aa bc 8d 4c 4d d8 7b b5 45 25 1b a9 9e 6d 3b 02 77 22 91 a8 a6 ce f4 Data Ascii: Myf{5&Z-$z97+U'>csKYdzzV;bjZ]Jj*W7DQo)\|u3}O)IF55G#SE1#TdJvzF2JJtMTANO:#U-IwDLSb$ju $Fzu'@DQ.LM{E%m;w"
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: be b9 a8 fc c8 a6 d8 f5 d0 6a 4d fb ea a1 aa c1 ba 18 df fe 5a 55 00 fb 59 ea e4 13 ef ac 98 d7 65 5c 81 e9 35 70 35 23 6a b1 1c b5 9f 1c b5 62 36 a8 02 e4 6d 57 6d da a8 43 56 12 b3 92 b8 17 3c fd 94 df 37 7d 43 4f 8e b3 d0 09 e0 6a 9b 75 55 91 b6 52 79 b5 2e 37 03 4a dd aa 5d d5 97 1c 95 6a 09 6b 37 13 45 22 d5 14 dd d4 cd f5 23 b9 2d 14 dd d4 c7 6a 06 12 54 0f 52 48 d5 1b d5 12 57 a6 c8 b5 25 36 46 ad 08 6a c5 7a 28 7a 6c 8d 54 22 5d f4 55 5d f4 55 72 81 5e 3f 33 cd d9 56 e0 8a a1 81 76 55 d8 d6 b6 9c 9d c0 23 82 9f b4 d3 a9 af 58 f3 30 21 a9 39 a8 f6 d4 db 4d 50 0d e6 a3 7a 7c 95 04 8d b3 ef d0 80 93 77 bd 36 aa c9 79 05 1f 69 8d ea b9 18 12 bb 53 37 7b d4 72 4f 1a 55 79 2f 11 2a 94 58 16 24 6a af 3c b5 5f ed d1 d4 72 4f 1b d5 c6 2c 57 43 a7 7a a7 3b Data Ascii: jMZUYe\5p5#jb6mWmCV<7}COjuURy.7J]jk7E"#-jTRHW%6Fjz(zlT"]U]Ur^?3VvU#X0!9MPz\|w6yiS7{rOUy/*X$j<_rO,WCz;
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: c1 a1 df de ff 00 a5 5a fd 92 4b 59 23 7f de ff 00 cb 68 f7 7f 75 3f bf fe f5 49 e0 ff 00 0f 41 aa fc 52 fe cc 41 37 d9 2c ec a1 bf bd fb 4c bf 3f cc fb 17 fe 02 d5 b5 f0 77 48 bf b7 d0 ef a7 bd fd dc 9e 5f 97 1c 7e 6f cf ff 00 ed 35 7b 0e a5 e0 f9 3c 05 f0 e6 4f 18 ea fa e7 87 f4 a9 b5 2b 8b 6f b1 59 df 68 9b f5 1d eb ff 00 2e fe 63 fd cc 2f 55 da c8 bf 7a 9c 2b a4 b9 a3 a9 5c 8e f6 6e c7 21 ae 78 6b ec 96 91 cf e7 7f c7 bc 9e 64 91 f9 5f f2 cb fd 9a a7 27 88 60 d3 3c 11 73 ab f9 3f 67 b5 f9 ee 2e 64 b6 8b 7b c8 9b f6 ff 00 df 3e b5 97 e3 1f 89 b0 45 77 b3 48 bc 8a f6 49 3f e7 94 5b d2 3f f7 eb 36 c7 c7 f7 ff 00 d9 32 5a da d9 da 49 27 97 f6 78 ff 00 b9 fe ee da c6 ad 77 24 93 65 2e 54 ec 77 5e 15 d6 a4 96 ef 7e 97 35 a7 d9 6e 3f e3 da e6 fa 2d f7 3b 3f Data Ascii: ZKY#hu?IARA7,L?wH_~o5{<O+oYh.c/Uz+\n!xkd_'`<s?g.d{>EwHI?[?62ZI'xw$e.Tw^~5n?-;?
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: 7f da a7 46 b2 5a 4d 22 69 7a 97 97 04 91 bf 97 fb af f5 7f ef 27 47 dd 59 e8 9d cb 4d c9 6a 77 fa 1c fa 6d de 9f 73 a5 a6 83 fe b2 d9 3e db 73 16 a1 fb e9 1d 5f fb c8 df 72 b2 fc 63 a0 c1 6f 34 89 65 67 69 a5 5a de c7 fe b3 cd 7b 97 93 6b ff 00 b3 f7 22 4a ce 8e fa 0f ec f8 ef 6f 6f 22 8e d6 3b 6f b4 49 e6 c5 f6 68 7e 5f f6 bf bd fe cd 64 78 93 c4 37 7a de 9f 6d a4 4f f6 bb 29 2f 36 49 25 b7 c9 fb cb 76 fb ae ea bf 72 b2 8d 46 a5 bd 8e 97 64 b5 0f 11 fc 2b 83 53 b4 b9 9f 48 9b 49 93 fe 5a 79 9f d9 ef 0f db e5 fe f4 ad bb ee d7 01 e2 ad 2b 45 f0 e4 d1 da ea fa 95 a5 ed f4 9f f2 ed a6 ef 77 ff 00 81 ef fb 8b 4f f1 77 8a a3 8b 4f fe cb d1 26 f3 3e cf fb b9 64 f3 77 d7 07 ba 4f de 79 1f bc 9e e3 fd 65 cc bf 7e 4a 55 ea a9 c6 d6 39 79 95 ad 12 5f 11 c5 68 93 Data Ascii: FZM"iz'GYMjwms>s_rco4egiZ{k"Joo";oIh~_dx7zmO)/6I%vrFd+SHIZy+EwOwO&>dwOye~JU9y_h
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: f7 ab b9 b1 b1 bf d6 3e cd 6b 6b 36 a1 a7 47 6f 72 92 47 25 8c bb 3e d1 e5 ff 00 07 7f 93 fb d5 a3 a5 69 51 dc 43 1d 92 5e 5a 47 07 97 fe 93 fb dd 9e 5e df fd 98 d6 e4 97 d6 9a 7d 9c 7b 3f d7 c9 1f ef 3c a8 b7 a7 fc 07 65 61 80 9d 28 42 4d da 37 6f aa fb c7 15 08 2d cb f0 59 f9 b6 9f b8 86 1b 8f bf e5 dc c7 2f f7 7f d6 6d 5f e2 a8 ac 62 82 2d 43 7f 93 0f 99 ff 00 1f 1f ba fb f5 8d 7d af 78 7a f6 d2 38 1e f2 6d 3a 39 3f 77 fe 93 13 c3 34 7f de ff 00 72 3a ab a9 6a 76 8f 69 23 e9 17 96 97 be 5c 7e 5c 96 d2 ca f6 df 68 ff 00 81 f5 ff 00 e2 ab ba 35 21 25 75 24 69 cc 8d 7f 15 4f 61 a8 7d a7 48 83 ce 8e 3f 2f cb 92 4b 6d 88 ff 00 37 de ff 00 c7 7f b9 5e 77 f1 42 cf 42 d2 bc 11 f6 2d 46 69 ac b4 7f f8 f7 b6 b2 8a ef 65 f5 ff 00 fb 49 fc 5f ef 3b d5 0f 8e 16 7e Data Ascii: >kk6GorG%>iQC^ZG^}{?<ea(BM7o-Y/m_b-C}xz8m:9?w4r:jvi#\~\h5!%u$iOa}H?/Km7^wBB-FieI_;~
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: 48 f5 48 7f b4 60 8e 4f 32 58 e5 8a aa c1 6d 1a 4d fb f9 bc b9 2e 3f d6 49 f7 3c ca 96 3b 9b 48 a1 91 20 f3 a3 fd da 49 27 9b 5b 72 45 a3 9b 9e 32 56 67 5b 1f 88 f4 5f 11 da 4b 65 aa 69 bf 68 82 39 12 4f b3 79 bb 3f ef e4 bf c9 56 af ce b6 1e 38 d7 2c 6e ae a6 9b 4e d2 a3 b9 4b 7b 2b 6f 37 c9 7b ff 00 ef c4 bc ff 00 0f f7 ab 88 d2 a5 b4 b4 d0 e4 b5 82 1f 32 7b 89 3c c9 6e 6d be 79 b7 ff 00 76 1a d4 92 ce d3 4a d2 63 b5 f3 ae e4 9f fd 65 ec 97 df 3c de 6f fc f3 f9 7f bb 5c 98 98 4e 52 76 93 4e f6 b9 53 c4 cd ee f7 35 fe 2e 78 b2 c7 50 d3 e3 f0 6f 87 ac fc bd 3b 4e d9 1c 7f 61 ff 00 8f 7f fa e5 fe e8 fe fd 52 f1 36 a1 77 a5 43 63 e1 e4 f2 6e 20 b7 8d 23 b9 f3 65 f9 36 7f 16 da ab f0 e7 4c d3 75 3f 88 51 d9 5e d9 f9 96 b6 f1 bc 92 5b 7f 07 fb 2d 55 fc 5a d7 Data Ascii: HH`O2XmM.?I<;H I'[rE2Vg[_Keih9Oy?V8,nNK{+o7{2{<nmyvJce<o\NRvNS5.xPo;NaR6wCcn #e6Lu?Q^[-UZ
2024-11-25 15:32:15 UTC	16069	IN	Data Raw: 19 7f d6 b7 cb f7 39 ad 6b 5f 0b da 79 32 59 5d 7f a3 5a ff 00 ac b9 f2 be fc 6f fe ea d2 da fc 4f d0 9a 2f b2 e8 ba 3c d6 56 b2 6f ff 00 8f 28 be 4f 9b ff 00 66 6a b3 25 e5 dc ba 7e fd 46 18 7e cb 1c 7f e9 b1 c5 2f ef bc dd 9f 2a 48 df de a8 a8 f1 29 fb e9 af 52 6c dc 9f 2e c6 75 f5 f4 0f 35 b5 ad ad 9c d1 c7 ff 00 4f 3f 3c df f0 26 fe f5 62 6a 5f d8 52 ea d6 d6 53 f9 df e8 f2 79 92 dc fd c4 f9 be f7 bd 52 93 57 91 fe 79 e1 9a de d7 cc fd dc 7f f3 ce b3 ac 6f b4 97 9a 44 9e 1f dd c9 27 ef 3f 8e 6b 8f f7 bf fb 1a f4 29 61 5a 57 b3 f9 17 7e 5e a6 da 5f 69 b6 56 9f 6d 8e 6f b1 79 92 3f d9 a3 8a 2d e9 1a 7f f1 46 a9 47 79 05 ec d2 6a 3f 6c ff 00 41 8f 64 7e 5c b1 7f ac 7f ef 3d 65 df 5c ff 00 6a cd 25 d4 fe 4d 94 72 6c 8e db fe b9 7f 73 cb fe ed 41 25 cc 17 Data Ascii: 9k_y2Y]ZoO/<Vo(Ofj%~F~/*H)Rl.u5O?<&bj_RSyRWyoD'?k)aZW~^_iVmoy?-FGyj?lAd~\=e\j%MrlsA%
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: 92 33 74 a9 e7 f2 7c 87 bc 87 cb f9 e3 fd ef df ff 00 61 bd 3e b5 73 4d 69 25 f9 d2 69 ad fc bf f9 e5 f7 e4 ff 00 80 d5 5d 4a eb c1 fe 74 73 dd 68 36 9f e8 ff 00 f1 ed 2f f6 b3 fe ef ff 00 65 7a a7 75 aa e9 bf 6b fb 2f 93 e6 7d a3 fe 5c bf d4 cd 22 2f fb 75 4e 93 ab f6 5a fe bd 4b 94 39 3d e4 ee 8e ab 51 d4 27 b7 f2 ed 6f 61 fb 44 71 c9 ff 00 5c 7e 4f f7 eb a6 f0 e6 91 e1 ed 4e 6d f2 6b da 86 9d f7 24 f2 e2 8b 7a 7c df ed ff 00 7a b1 bc 0f af 78 23 c3 fa e5 b6 a3 a7 5e 6a 11 c9 ff 00 3e 57 d2 a2 27 cd ff 00 a1 7b 56 be ab f1 1b fb 42 69 1f 4e fe c9 fd e7 fa b8 e5 8b fd 5f fb 5b 6b c2 af 4f 10 df 2d 38 3b 77 db f0 3a 69 54 a4 dd e6 d3 f2 2e 78 ab c2 1a 6f f6 4f da 9f ec 97 10 7f d3 cf c8 f2 7f b9 5e 65 7d e1 58 2f 66 d9 a2 4d 34 72 7f cf b4 b1 79 c9 b3 fb Data Ascii: 3t\|a>sMi%i]Jtsh6/ezuk/}\"/uNZK9=Q'oaDq\~ONmk$z\|zx#^j>W'{VBiN_[kO-8;w:iT.xoO^e}X/fM4ry
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: 65 3a 6b 43 cb fc 7f e1 39 3f b7 24 83 c4 ba f4 3e 66 9d a4 bd c6 a3 73 6d bf 67 9b 1b c7 b9 64 fe 2f bb 22 7f c0 ab 88 f8 cd a1 c7 a0 ea 12 49 a7 43 77 a7 5a c7 73 e5 c7 65 f7 ff 00 74 bf f2 c9 a4 ff 00 96 ac bf c4 d5 ed 3f 14 16 d1 f5 0d 6f ec b6 73 5c 69 b7 ba 2d b5 a5 cf 9b 16 f7 b8 bd f3 92 59 99 3b ec 6f b9 5c 3f 8e ff 00 b2 f5 5d 2e ca 1d 17 48 ba b7 d5 35 19 1f ed 11 5c ea 1e 74 56 7a 77 cb e5 c3 17 fd 35 dd f7 9b f0 35 eb d1 ad 4a ca e8 e0 ad 0d 37 dc f2 9d 03 c3 f7 7a 85 d4 88 fe 55 bf f6 77 ef 23 fb 34 bb de 7d ff 00 33 33 56 f7 87 2d ac 34 49 ae 6c b5 18 7c c8 2e 3f d6 7e f7 c9 f2 f7 7f 77 f8 77 15 ae ab c1 da 0c 9f d9 32 4f f6 cb 4d 2a ea 4b 97 fb 34 97 d1 79 2f 70 ed f2 ed 59 17 f8 7f df f9 68 be d0 f4 97 d5 af be db f6 4b 79 34 e8 ff 00 d1 Data Ascii: e:kC9?$>fsmgd/"ICwZset?os\i-Y;o\?].H5\tVzw55J7zUw#4}33V-4Il\|.?~ww2OM*K4y/pYhKy4

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bb18f6-501e-000a-54a9-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153214Z-174c587ffdfldtt2hC1TEBwv9c00000005x000000000pc8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49771	2.16.158.96	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	367	OUT	GET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive
2024-11-25 15:32:14 UTC	626	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Type: image/png Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 1107 Date: Mon, 25 Nov 2024 15:32:14 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.169e1002.1732548734.c5589b
2024-11-25 15:32:14 UTC	1107	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 03 e8 49 44 41 54 48 4b bd 56 df 6f 54 45 14 9e 7b 79 37 a2 bc 17 2a 7f 82 fa 2c 94 d7 96 1f 09 0f e2 0b d1 44 30 1a c5 42 4b 20 d0 90 00 89 89 3f 23 0b a1 a5 2d 82 b4 90 b4 1a 69 81 6e 63 49 20 41 5e 08 a5 85 85 6e 03 16 24 d8 b4 5d 76 bb eb da 36 e9 9c 73 c6 ef cc bd bb 4b c0 1a 5b 13 6f 72 ee f7 ed cc dd f3 cd f9 e6 cc cd 35 22 c2 ac b7 28 4a 5c f1 6f 79 fc a8 5e ff c4 fd c5 b8 0c 3b e7 e6 af f6 f0 ec b1 bd 3c d7 76 88 e6 da 0e 02 0f 2a 56 78 fb 21 9a 39 b6 87 e5 ee 10 0f 67 7e a4 9e d4 47 9c 1c dd 4d Data Ascii: PNGIHDRw=sRGBgAMAapHYs%%IR$IDATHKVoTE{y7,D0BK ?#-incI A^n$]v6sK[or5"(J\oy^;<vVx!9g~GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49774	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	375	OUT	GET /th?id=OADD2.10239339388242_1QZCW7SLJ2W1SQ00B&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:14 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 495551 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C60EAF38AC644EF98BF9D1BA544129FB Ref B: EWR30EDGE0314 Ref C: 2024-11-25T15:32:14Z Date: Mon, 25 Nov 2024 15:32:13 GMT Connection: close
2024-11-25 15:32:14 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 31 31 3a 31 38 20 31 33 3a 34 38 3a 31 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.0 (Windows)2022:11:18 13:48:108C
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: 67 3d 94 19 59 90 8f 98 55 98 18 95 e6 93 cb 06 9c ab 8a 23 74 12 94 64 3b 70 34 e5 1b a9 13 02 a5 56 51 4d ca 48 cd 45 0f 85 00 eb 57 21 58 c2 e6 a8 6e ef 4f 57 21 71 5c d5 29 ca 4b 73 ae 8d 48 c7 a1 a0 d2 a0 a6 34 aa 6a 9e fa 55 7a e7 fa b9 d1 ed ee 5a de 29 cb 20 aa 7b b3 4b b8 8e 94 7b 11 aa c5 cd e0 d3 58 81 55 7c c6 ef 4b e6 13 f3 52 f6 2c 3d b4 49 99 80 e9 d6 98 cf 51 b3 93 cd 37 39 ab 8d 26 88 95 65 62 45 76 34 d9 4e 69 8d cd 26 ef 4e 95 bc 69 f5 39 a5 59 6c 23 0c 35 18 f6 a3 07 a9 a5 c5 74 c7 63 96 4e ec 4a 55 14 94 ea a2 44 c5 2d 2e 29 68 01 b4 63 da 9d 45 00 37 1e d4 b8 a5 a2 80 13 14 b4 50 a2 80 0a 46 cd 2a d1 40 06 3d a8 c0 ef 4e fe 74 98 a0 03 14 2d 2e 33 43 0c 73 40 09 8a 5c 7b 51 46 3d a8 00 a3 1e d4 ea 4e b4 00 94 7b 52 f4 a3 14 00 98 5a Data Ascii: g=YU#td;p4VQMHEW!XnOW!q\)KsH4jUzZ) {K{XU\|KR,=IQ79&ebEv4Ni&Ni9Yl#5tcNJUD-.)hcE7PF*@=Nt-.3Cs@\{QF=N{RZ
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: 79 db b8 53 9f 4c 11 b6 7c aa bf 04 de 52 ae da 7c 97 61 eb 8d d6 a9 73 a1 51 8a 5a 99 a2 cc 05 fb b5 62 de c2 32 bc ad 5c 86 58 cd 4c a5 0a e4 51 f5 89 87 b1 83 e8 66 5c d8 a2 af c9 54 26 8b 1c 56 dc d9 6d c2 a9 b4 0a 64 6d f5 bd 1c 43 fb 47 3d 6c 34 5e c6 63 47 bb ad 49 0c 0e d5 67 60 59 18 76 ab 36 a1 15 ab 69 57 49 68 61 4f 0f 2b d9 91 5b 58 96 6e 57 8a 35 2d 3d d2 3c 8a d9 b6 03 6e 6a c3 40 b2 2e 1b a5 70 4f 10 db d4 ef 86 1d 25 a1 c7 35 b4 a5 78 aa ec 8e 3e 53 f7 ab b6 92 d6 05 5c ff 00 7a b2 35 0b 24 32 7c ab 55 0a ea 41 2a 6d 1c f3 16 0d b4 d0 cd f2 f3 57 ef 2d 00 6c 55 53 01 15 d3 14 a4 60 e4 d1 59 e4 3f 8d 31 a4 fc aa cb db 86 5c d3 1a dc ff 00 bd 5a 72 a4 4f 3b 23 59 48 ff 00 ec aa 54 99 bf bd 4d 68 08 a5 f2 da 97 b3 17 b5 25 fb 43 0a 7a 5d 1a Data Ascii: ySL\|R\|asQZb2\XLQf\T&VmdmCG=l4^cGIg`Yv6iWIhaO+[XnW5-=<nj@.pO%5x>S\z5$2\|UA*mW-lUS`Y?1\ZrO;#YHTMh%Cz]
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: b8 98 06 c0 aa ad 75 9f f6 aa 09 a7 cd 52 a6 27 3d 0b d1 ce 7f 0a b1 0c bf 2d 62 ac bf ed 55 9b 79 89 eb 4e 54 f4 25 4c d8 5b 9d bf c5 cd 3d 6e 09 e4 56 49 98 1f e2 5a 92 19 b1 c6 ee 6b 17 4c d1 48 d4 f3 49 5a 89 9a a0 47 61 51 c9 2f ad 4a 81 4e 45 af 34 6e c5 2f 9a 3f bd 59 eb 30 a9 3c d0 d5 5c a4 a9 16 da 71 44 72 77 aa 6c d4 9e 66 38 a3 95 07 31 ab 0d c7 63 4f 79 73 d2 b2 92 5d b5 66 39 03 54 38 14 9b 2c 3c 86 ab 5c cd 8d d5 23 36 2a 85 f1 f4 aa 82 4d 93 26 45 73 73 f3 55 57 b8 dc cb 51 5e be 2a a2 c9 86 ae c8 c1 58 e5 94 b5 34 56 4c d4 d1 fd e5 07 a2 d6 74 2e dd 6a f2 3f cb 9a 24 38 b2 fa 48 83 9a b1 6e e1 9a b3 e3 6f 96 a7 49 f6 56 12 89 ba b5 b5 34 73 b5 78 a2 39 7b 16 ac ef b5 e7 70 34 f8 66 cf 3b ab 3e 56 33 45 8e 56 a2 8e 52 b2 73 55 da e8 0a af Data Ascii: uR'=-bUyNT%L[=nVIZkLHIZGaQ/JNE4n/?Y0<\qDrwlf81cOys]f9T8,<\#6M&EssUWQ^X4VLt.j?$8HnoIV4sx9{p4f;>V3EVRsU
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: da 8b 56 a6 46 30 ef fe ef 3f 2f e8 69 4a a3 7a 2d 87 29 59 22 28 d1 23 87 64 7f 28 db f2 fc b4 9b 00 5c 16 65 8d 9b 3b be ef ff 00 5e 9c 8c c5 70 1b 8f e2 6d bf 77 ff 00 ad 4d 50 59 98 ff 00 ab 55 6f e5 52 2d 53 15 9a 02 cc 23 6d c3 8f 97 6f eb 50 bc f6 53 ee 44 9f 68 56 3b 9b fb bf 8d 61 78 96 f4 8b a5 4d ca aa bf 3e d5 f9 77 1a cd b5 d5 92 09 95 3e 56 8d 54 0f dd fd d6 3d f9 ad 14 1d ae 6b 18 26 b7 d4 ec 96 18 db f7 7f eb 3e 51 ff 00 02 c7 4c d2 b6 c8 97 ee ee 4f e2 56 6e f5 5b 40 be 82 fa 16 40 ad be 2c 6d f3 3e 5d b9 e9 f8 55 c5 49 19 9b 64 5b 99 7e f6 ef f3 d2 b2 6e db 91 66 9d 99 0c 32 38 93 67 dd 1b 4b 2f fb 5f e4 d4 51 da ca 97 0d 2b fc cd fc 4d fe 7d 2a de e0 24 fb bb b6 f3 bb 6f cb cf a7 b5 45 2b 18 f7 3f dd 56 6f e2 fb b9 a5 cc 54 4a 1a a9 09 Data Ascii: VF0?/iJz-)Y"(#d(\e;^pmwMPYUoR-S#moPSDhV;axM>w>VT=k&>QLOVn[@@,m>]UId[~nf28gK/_Q+M}*$oE+?VoTJ
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: c5 15 df c1 04 be 6c e9 a7 c3 b8 75 f1 3b 9c f7 c1 ef 0a 5b 78 17 e1 9e 91 e1 9b 65 8f 75 b4 3e 7d f4 88 bf eb ae a4 19 91 89 ef 8e 10 7b 25 74 13 39 0b 59 f7 57 9a bd b4 ca 24 d3 20 9e 19 30 3c c8 25 dd b7 ea a7 91 fa d4 f1 8b fb 9b c6 8a 2d b1 2e e0 3e 65 f5 fe 95 f3 15 a5 2a 95 1d 49 bd 5e a7 d0 d1 a3 1a 70 51 5b 21 d3 4d f7 90 7f 0f 1b 9a 99 6b 19 31 c7 21 db 86 e7 6e ef 99 bf fa d5 e2 da 3f 8d fc 69 f1 2b e2 fe a7 e1 0f 0f cb fd 87 e1 dd 02 59 17 5a d4 11 47 db 1a 08 db 63 05 dd f7 5a 46 f9 54 01 95 dd 93 5e d7 a7 fc f1 e4 45 e5 8e 91 af f7 40 e0 0f c0 56 d8 ac 24 f0 a9 2a 8f de 6a f6 ec ba 5c 9c 3e 22 15 f9 9c 16 8b 4b 96 66 38 eb ff 00 7c d4 4c c7 e6 cf 5a 32 4b 6c ee ad f2 d1 22 63 71 3b 7b d7 19 d5 6b 0c 87 e7 56 7d df 36 ec 2e ef 4a 64 81 a3 dd Data Ascii: lu;[xeu>}{%t9YW$ 0<%-.>eI^pQ[!Mk1!n?i+YZGcZFT^E@V$j\>"Kf8\|LZ2Kl"cq;{kV}6.Jd
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: 97 36 f5 5f 0e 7c 32 0d 1c 97 f6 d6 56 77 2c d9 57 b4 b9 30 cd 9f f8 07 5f c4 56 c6 97 6b 69 71 25 b6 9d e1 6d 4e 3b cd 42 55 fd c5 b4 ea 26 92 6c 7a 6d c1 18 f5 61 81 5c 9e 8f f0 b3 57 ba d7 20 d2 7c 35 79 a6 fd b2 7e 37 7d d7 b7 41 f7 9e 4d b9 f9 47 af ad 7d 29 f0 cf c0 ba 37 80 74 7f b1 e9 6f 25 dd fc ea 3f b4 35 3b bf f8 f9 ba 3d c6 7f 82 31 d9 07 1e b9 ac b1 35 a9 d3 82 7e d1 c9 f4 5f d7 42 a3 52 50 97 c0 93 66 5f c3 af 00 7f 63 c7 1e a9 e2 e6 b6 d4 b5 9d d9 8a da 25 cd ad 99 f4 f4 91 c7 f7 8f ca 3b 57 70 ad e6 37 da 2e 1b cc 65 6d eb 27 de f9 ff 00 fa d5 13 83 2b 32 26 e6 6f e9 52 c9 b1 21 fb bf 2a fd ef ef 57 89 52 b4 e6 ee c9 71 e6 77 93 d4 91 31 33 46 bf 2e e5 6d ed b9 be 7c fa d2 5a 47 05 ae d7 8d 76 ab 33 16 8d 57 ef 6e fb d9 aa f7 0e 0c 71 5c Data Ascii: 6_\|2Vw,W0_Vkiq%mN;BU&lzma\W \|5y~7}AMG})7to%?5;=15~_BRPf_c%;Wp7.em'+2&oR!*WRqw13F.m\|ZGv3Wnq\
2024-11-25 15:32:15 UTC	16065	IN	Data Raw: 6f f2 c6 e6 3e 9f 36 6b e1 df 82 77 10 3f c6 0f 09 cf ab f9 7f 61 5d 6e d8 ce d2 7c c9 f7 f0 b9 f6 dd b6 be e7 b9 42 6f 25 32 b7 ef 5a 52 8c de fd f3 eb 5f 29 c4 16 84 a9 c6 dd dd ff 00 43 df cb 64 e7 06 de c4 7c 96 c1 6e 3f d9 f4 fa d5 94 68 c6 d4 0c ab f2 ff 00 0a ed 6f 7a 72 c6 22 5d 85 77 37 1f 2a ff 00 0f a5 43 71 b1 2d da 43 f7 77 7f ba d5 f3 8d dc f5 23 66 32 fa 70 93 2c 7f f3 d1 46 df af bf e1 56 55 f1 d1 95 87 07 fd 9c 7d 7b 73 58 51 dc 0f b5 6c b8 66 c7 3e 62 c9 f3 6d e7 a6 6a f5 9b ee e2 59 59 97 76 23 fe 2d df 51 53 28 b2 dc 74 35 1c c6 ea d9 f9 bf be cd fc 55 1b 14 6f de 16 dd fd d8 ff 00 87 f2 a6 5b ae 24 51 f2 b1 5f bc bb 7e f1 a3 32 f9 91 c4 55 17 6a 83 f2 f4 52 3b 1c 7b 54 11 a1 2b 9d ab ca b4 8d c0 f9 58 6e 6a a7 20 72 d9 fb c5 7e ee dc Data Ascii: o>6kw?a]n\|Bo%2ZR_)Cd\|n?hozr"]w7*Cq-Cw#f2p,FVU}{sXQlf>bmjYYv#-QS(t5Uo[$Q_~2UjR;{T+Xnj r~
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: 57 52 79 cf 6d b6 45 cf cb 1c 89 b5 88 fe 1e 3f 87 15 05 c0 9e d2 65 f3 20 5c cb c4 72 79 05 bf 97 3f 8d 58 98 46 1a 49 0d 8c ec de 58 45 96 2d fb b1 db 1b 81 aa 77 02 ed e4 8d e0 82 ee 4d a9 f2 b7 d9 23 66 53 f5 cf 3f ce 84 ae 04 6b 25 ac d7 12 db a4 f1 ad ca e0 ed 55 66 76 3f 46 c9 5a 8a d6 fe 09 ee 24 4b 4d 43 e5 8d 48 66 93 72 b2 9f f8 12 e7 af 70 2a f5 86 8d 34 f7 8d 72 97 37 70 2b 2f cd 2a d8 44 8f d7 a8 20 92 3e a0 d6 ab 47 3c 3c a6 af 24 ad fc 52 5d a8 6e 07 7e 68 29 18 77 76 17 8b 6b 24 bf 6c 8f ce e5 da 56 df 26 e1 ec 0e 03 37 e1 9a a8 b6 72 6e 90 dc 6a 77 2d 34 b8 2c 92 31 45 c0 1e 9e 83 d2 b6 6e 22 89 6d 6e 7c ad 4e 39 03 36 57 cf 8d 15 17 1f 78 e4 0f d2 9d a7 ce 65 85 64 93 55 b4 97 ae dd ad 1a 2e 47 bb 0e 94 25 72 4c bb 6b 89 61 85 64 1a 84 Data Ascii: WRymE?e \ry?XFIXE-wM#fS?k%Ufv?FZ$KMCHfrp4r7p+/D >G<<$R]n~h)wvk$lV&7rnjw-4,1En"mn\|N96WxedU.G%rLkad
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: b9 7a 6d 5d c5 b9 f5 27 d2 b1 f4 95 0b 79 e7 4b b9 b7 c7 85 66 ce e8 f9 e9 cf f8 55 d9 9e 54 db 19 9d 55 1b f8 63 6f 99 71 f5 ed ed 58 c9 74 44 aa 71 65 fd 5a 69 0c 7e 63 aa a8 f3 00 91 bf bd 9e 33 8a 6d bb 14 ba 8a 04 65 c7 45 f9 b3 c0 15 42 f2 e8 34 92 46 5b fd 53 0f 95 7e 7e 69 be 7c b2 2e f8 9d 62 f9 b1 fb d5 da 58 1f 4f 7a cd 45 8d c5 5b 73 43 5a bf 48 d6 42 22 59 e3 5e 37 75 56 24 7a 7b 52 e9 f1 db 4b 24 45 ed ad 9b 77 dd 91 d4 30 e3 b7 cd d3 35 9f 71 23 a5 ac 61 2e 60 68 e4 c8 58 f6 ed da 7d be be 95 25 9b db 46 ac 93 ea 0c c3 7f cc bc 0f 2c 7a 03 5a 7b c9 19 38 44 d4 d5 9a df ed 12 b8 8a 08 c4 6c 36 ed 51 f2 fe 3d f2 2b 1b 50 9a ce 4d 4b cc b2 5f 22 65 5d f2 c9 13 6e 79 0f 65 20 7e 9c 56 77 88 bf b2 2e 7f 7b 25 e5 ca 2a c7 f3 6e b9 f2 fa f6 e7 18 Data Ascii: zm]'yKfUTUcoqXtDqeZi~c3meEB4F[S~~i\|.bXOzE[sCZHB"Y^7uV$z{RK$Ew05q#a.`hX}%F,zZ{8Dl6Q=+PMK_"e]nye ~Vw.{%*n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49773	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	346	OUT	GET /th?id=OADD2.10239370639703_1XZVEAKL3PD7EZGL4&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:14 UTC	861	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 637660 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 20484DA87E1A439B87CC9950AFB35984 Ref B: EWR30EDGE0114 Ref C: 2024-11-25T15:32:14Z Date: Mon, 25 Nov 2024 15:32:13 GMT Connection: close
2024-11-25 15:32:14 UTC	3517	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1d dc 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 31 3a 32 31 20 31 36 3a 32 38 3a 34 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.1 (Windows)2023:11:21 16:28:408
2024-11-25 15:32:14 UTC	8192	IN	Data Raw: d9 73 01 ee e2 22 40 d1 ad 9e 5d f4 55 80 d6 9c 59 06 09 76 ee 75 f8 ff 00 27 da 92 11 b7 de c7 b8 43 76 06 08 93 24 fd 17 16 8f fa 6f 51 d8 ef c6 7e 5e 2a 56 00 c7 9d bc 38 07 8e da 14 1d 3c b9 8f 92 75 e9 68 7f ff d4 b5 83 f5 63 08 5b 5d fd 43 3a fc db 98 00 6d c5 c2 aa 47 a8 d1 b6 dc 56 55 0c f4 ef a6 df f0 8f f4 ad ff 00 49 eb d8 ad 57 d0 f0 f0 59 89 41 6b 7d 0f 55 b8 e1 8e 76 fb 1c 2e 73 ef 0d b1 ce 6d 59 2c bf d5 77 ab 43 bf 47 f6 7d 9f ce 2e 57 2b a9 55 7e 73 69 ea b6 66 dc d6 e8 1a 2d a4 b5 ae 68 0d 7f e8 3d 33 8f 76 e6 3b 7f a6 b7 ba 6f 53 fa be cc 66 62 d3 7b 9a 1a dd a4 e5 b7 dc e1 c6 db 6e 77 e8 ac fa 5b 3e 9f f3 6b 0b 2e 5c 98 61 1e 28 cf 2f 11 e2 a8 0a c7 08 ff 00 83 1f 6f d3 fe cb 13 38 9c 6e b4 1e 7b b6 73 ab c1 bd 8c c2 e9 78 d8 d9 37 d8 Data Ascii: s"@]UYvu'Cv$oQ~^*V8<uhc[]C:mGVUIWYAk}Uv.smY,wCG}.W+U~sif-h=3v;oSfb{nw[>k.\a(/o8n{sx7
2024-11-25 15:32:14 UTC	4144	IN	Data Raw: ab 49 c5 4f 72 71 55 5d b2 d4 0d 0d 93 8a ab 70 dd aa 69 98 ed f6 aa 97 0d 8a b4 32 bd d3 61 78 ac fb 97 c5 59 b8 7c d6 7d c1 35 6b 72 59 1c 8f 50 3b 9a 7c 8b 9a ae dc 56 88 96 89 a1 7f 9a b4 6c 66 1f 72 b2 d0 67 91 56 2d dc 86 a2 5d 84 6d 2c 9d aa 74 38 8f 26 b3 21 94 6d e5 aa 43 29 6e 37 54 58 a2 f3 3e 7a 54 4e c3 bd 57 59 80 e3 75 32 69 81 e8 dc d2 b3 11 61 df 1d 2a 9c d7 0e 1b da 9a d3 1f 9a a9 4d 2e 5a ae 20 4c d3 6e eb 51 ef cb 54 12 3f cb 4c 57 61 cd 5a 44 9a 91 c9 8e 2a 55 b8 d8 b9 ac db 69 77 37 3d 6a 79 0e 7a 54 b4 34 68 5b 5f 7c df 7b ee d7 43 a1 ea f1 96 58 dd ab 88 c1 5e 69 f1 dd 14 65 d9 bb 2b 50 e0 98 cf 41 9e e9 0b 70 db 85 54 b8 98 1e 45 72 90 ea 32 2b 7d fe 2a fc 3a 98 78 ea 39 2c 52 65 fb 89 aa a9 bb 28 d5 15 c4 db 97 22 b3 ee 25 c3 7b Data Ascii: IOrqU]pi2axY\|}5krYP;\|VlfrgV-]m,t8&!mC)n7TX>zTNWYu2iaM.Z LnQT?LWaZDUiw7=jyzT4h[_\|{CX^ie+PApTEr2+}*:x9,Re("%{
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: d2 54 52 4b 9e 94 05 89 9e 6e d4 55 65 7c b5 15 2d 5c 76 47 c2 eb 45 3b 9a 4c 57 ea c7 e7 a3 5a 8f ad 2b 51 41 43 30 29 29 f8 06 8c 52 1a 23 61 49 8c 53 f0 4d 1b 70 de f4 01 1b d3 5f 35 36 32 d8 ef 4e d8 fb b1 b6 93 63 51 64 da 5d ad c3 c2 d2 47 13 32 f4 dd 5d 6d 8f 80 2e b5 4b 18 e5 b4 f9 64 6f e1 91 6a 0f 06 25 bc 2a b2 5c cb b5 63 6f f5 5f 7b 71 af 6e f8 7f 04 92 5b ad cc eb fb b9 3e ea b7 e9 5e 4e 37 19 3a 3a c4 f5 f0 78 48 54 8f bc 7c e9 e2 2f 0d 6a 1a 25 d7 91 78 bc ff 00 79 6a 4d 17 ca 49 bf 85 4b 2e 37 57 b9 fc 50 d0 f4 cb db 59 25 75 dc 57 3f 32 d7 85 ea b6 a6 d2 f1 a3 46 f9 77 7c ad 57 86 c5 7d 62 9f 99 15 b0 de c2 7a 6c 77 be 09 bc b3 b1 e9 f3 33 7f 15 75 ba 96 b9 6c 61 c0 6a f1 ab 1b c9 44 7b 23 fb df de a9 7f b6 2e e3 9b 64 f2 ee fe ef cd 5c Data Ascii: TRKnUe\|-\vGE;LWZ+QAC0))R#aISMp_562NcQd]G2]m.Kdoj%*\co_{qn[>^N7::xHT\|/j%xyjMIK.7WPY%uW?2Fw\|W}bzlw3ulajD{#.d\
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: bd 83 c0 3e 16 d3 fc 33 63 f6 3d 3e 3d a1 b9 66 fe 26 af 9a cd 33 5a 6e 9c a9 41 ea 7b f8 1c be 70 92 a9 33 a2 b7 5d ab c5 58 41 9a 21 8e a6 55 af 93 3d 90 45 a7 28 a5 a3 38 a0 06 48 b9 a8 24 15 61 ce 6a 3d b9 a0 08 18 55 6b ab 68 e4 fb eb 57 24 38 e2 a0 73 9a 06 8a b0 c3 24 7b 8f 6f e1 a8 ae ac fc e9 23 23 aa d6 82 0d d5 65 22 40 bf 76 81 dc e7 ae bc 33 a5 5e 4d e6 dc d8 c1 2c 9f de 65 dd 56 b4 fd 16 c2 ce 3d 96 f6 d1 c6 3f d9 5a d8 c0 5a 85 db e6 e2 ab 9e 4d 5a e4 90 43 65 14 4d f2 2e da 7b af a7 4a 7b b9 a8 d9 c9 a9 18 42 31 d6 a5 a6 20 cd 4a 06 da 01 8a 8d b6 83 26 69 ad 4d c5 02 24 53 52 f3 50 29 c5 3d 4d 00 49 9f 7a 33 ef 4d 5e 69 7a 50 03 e9 ad 4b 9a 6b 1a 00 46 14 c6 a7 31 a8 9c d0 03 f3 49 9f 7a 66 ea 37 50 04 8a 68 63 4c dd 4d 66 a0 07 e6 9a cd Data Ascii: >3c=>=f&3ZnA{p3]XA!U=E(8H$aj=UkhW$8s${o##e"@v3^M,eV=?ZZMZCeM.{J{B1 J&iM$SRP)=MIz3M^izPKkF1Izf7PhcLMf
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: 1a 7a 2d ab 2a 05 e2 bc bc e2 a4 55 4f 67 1e 87 66 5f 16 e9 f3 b7 ab 3a 0b 55 c2 d5 85 aa b6 af b9 56 ad 20 af 0c ec 16 86 a7 73 4d a0 02 93 34 8c 69 3a d0 00 dc d1 8a 5a 16 80 15 69 69 b9 f7 a6 b3 50 03 9b 15 14 8a 0d 2e e2 68 6a 00 ab 22 62 a0 75 ab cc 33 55 e4 5c 50 32 ab ad 57 99 6a d4 83 15 5e 63 8a 92 91 55 c5 44 d5 2c 84 54 2e c0 d0 58 c6 24 52 6e 22 95 98 1a 63 9a 68 01 9c d2 ac 95 03 b5 31 9c d1 60 2d 34 d8 a6 b4 f5 55 a4 a8 64 70 7a 51 60 2e 3d ce 7f 8a a3 6b 8c 55 09 25 f9 be f5 44 f3 e2 8b 01 7e 4b 9c d3 a3 9b e5 c9 ac 96 b8 a7 2d ce 29 81 a6 f2 83 51 4d 28 aa 8d 71 95 fb d5 03 dc 65 b3 be 95 80 b1 24 99 e9 50 c9 51 ac bb a9 f9 f7 a6 04 38 cd 47 73 1e 16 ac b2 e6 97 cb 2c b8 a0 0c 92 b9 6c 54 4d 0f cb 9a d7 fb 23 1a 8a e2 0c 2d 3b 81 9a b8 55 Data Ascii: z-*UOgf_:UV sM4i:ZiiP.hj"bu3U\P2Wj^cUD,T.X$Rn"ch1`-4UdpzQ`.=kU%D~K-)QM(qe$PQ8Gs,lTM#-;U
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: 77 6f 3b bf 87 8a c9 4b 5d 0d 25 15 6d 4a 4f 6f 26 ed 9e 53 62 99 b6 48 6f 16 35 5d a1 bf 91 ad 0b 0b a0 5b 63 b6 e3 ff 00 8e d5 87 b4 8f fd 7b ae e6 5f bb fe cd 37 26 b7 12 8a 63 92 ce 47 b7 e5 96 3d ab 55 fe d2 22 5c c8 cb f2 ad 5b 8e eb 6c 78 0a d9 e3 ef 2f 19 ac 9d 4a 34 69 30 eb b8 7f 13 7d da ce 9a 6d b4 cb 9c 92 57 44 cb aa 3c ed b2 26 da 3f dd aa 37 24 19 99 ca b6 59 aa 38 55 12 46 68 95 b0 bc 7d da 9e d6 29 25 b8 c0 65 c7 56 f9 77 7f fa ab a1 41 47 63 1e 67 2d 04 84 19 78 8a 3f 33 a0 fb d4 56 c4 1a 63 c1 1b 4e ec b9 ea ab f4 f7 f5 a2 b2 f6 88 b5 4d d8 f5 a5 19 a5 55 25 b1 4f c5 2a 8c 37 1f 2d 7b 4c f1 51 7e ce 33 6c cb 20 9f e6 eb f2 d7 75 e0 bd 7a e1 da 28 c3 73 b8 6e af 3a 57 23 f8 ab 53 44 d4 3e cb 26 51 7e 66 ae 0c 56 1f da 43 6d 4e dc 36 23 Data Ascii: wo;K]%mJOo&SbHo5][c{_7&cG=U"\[lx/J4i0}mWD<&?7$Y8UFh})%eVwAGcg-x?3VcNMU%O*7-{LQ~3l uz(sn:W#SD>&Q~fVCmN6#
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: 69 58 a3 5d 6e 07 4a 72 dc 56 33 dc 3d 3e 1b 83 de 8d 45 64 6c 09 01 a6 b9 dd f4 aa 11 ca 59 b8 a9 92 43 4a e1 6b 13 34 41 aa bc 91 81 d6 9d e7 e2 a0 b8 97 34 00 93 6c db 81 59 f7 3c 54 ee c6 a9 dc b9 35 40 43 70 c0 2d 65 de 4e 15 be 5a b9 74 df 2d 65 df 29 35 71 40 c6 c9 31 6f a5 54 9e 70 1b 9a 7b b6 d8 db 3d 6b 3a 69 37 35 6f 08 dd 99 b6 45 74 d9 6c a2 d4 96 0c c5 b0 57 69 a8 9d 5c f2 3f 86 b3 b5 ef 13 68 fe 1d 8e 3b 8d 4e 76 8c 48 d8 5d b1 97 6f d2 ba ef 18 41 ca 4e c9 18 ea e5 65 b9 c9 7e d2 0f 71 26 a9 a1 db 5b a6 d0 ab 23 dc c9 b7 e6 d9 c0 0b f8 9a e6 3c 33 a5 69 77 5e 0d d4 df fe 12 3d 3d 8c 5a 6c c9 73 1b 48 8b e5 96 1c af 5e bd aa a7 c6 ef 89 3f d9 ba c5 b5 cf 89 1a 78 23 bc 90 c7 65 1c 50 0d b6 f6 f9 c9 66 1c 92 c4 57 09 f1 db c6 1e 06 d5 7e 17 Data Ascii: iX]nJrV3=>EdlYCJk4A4lY<T5@Cp-eNZt-e)5q@1oTp{=k:i75oEtlWi\?h;NvH]oANe~q&[#<3iw^==ZlsH^?x#ePfW~
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: 8d d9 a8 2f ca 08 f3 f8 54 93 2a 4b fb c3 f2 b3 54 33 26 5b 96 e1 6a 80 af 0b 0d ac 0e ed d5 f4 6f c3 44 b2 d3 7e 0b d8 ea fa 84 f2 5c c6 bb b6 c5 1c 63 64 79 3c f5 e3 23 d6 bc 03 45 8a de 7d 4a 28 ef 25 58 ed f7 7e f1 97 e5 e2 bd e3 41 d6 62 9f c0 2d 65 6d 14 12 45 1a 84 b6 82 46 f9 5a 31 f7 99 b3 c0 04 fe 75 f2 dc 4b 46 55 68 42 2a f6 ba 6c ef c1 bb 49 b3 77 4e f1 45 9e a9 e1 99 c6 98 b3 c5 1f 98 03 4e ca 36 a8 e8 14 7a 9f 61 4c b6 d2 e0 f1 3f 8c ac f4 0d 77 4f be 6d 35 b6 bb 2c 52 05 f3 10 7f 79 87 f2 ac dd 3f 47 79 34 5b 1d 21 f4 f6 69 23 9c cd 73 1d a3 6e 8f 07 9c 31 e3 3f 85 7b 2f c0 dd 0a e1 f4 3b 98 bf b0 6d ae ae 56 7f dd 4b 2c 7f ea 63 03 e5 1f 85 7c 46 17 0f 4e 38 89 4e 93 b3 bb b7 97 99 ea d2 a7 29 cb de 3a 0b 5d 3f 40 f0 46 9e ba 3c 1a 57 d9 Data Ascii: /TKT3&[joD~\cdy<#E}J(%X~Ab-emEFZ1uKFUhBlIwNEN6zaL?wOm5,Ry?Gy4[!i#sn1?{/;mVK,c\|FN8N):]?@F<W
2024-11-25 15:32:15 UTC	8192	IN	Data Raw: f9 0b b4 2a c6 9d 98 ff 00 85 6d fc 4b 43 e2 5f 88 9a bf 8a 23 b3 9e 4b 16 bd 90 45 2c 8b fb b6 d9 85 c8 fe f1 fd 2b cf bc 59 e2 1b cb bb e8 ad e7 9f 74 56 ab b1 63 55 c2 af d6 ba f0 f7 a9 18 51 5b 47 73 93 10 d2 94 a4 fa ec 62 6a d6 d2 a5 bc 77 32 4a d2 4b 2b 16 66 6a 2d 67 b8 82 15 44 97 cb 0c df 79 7e f5 37 56 ba b9 ba 86 21 e5 79 76 d1 b6 23 a6 cc 81 23 8f 0d f3 33 61 6b db b2 d8 f3 ba 8f d4 bc b4 8d 50 7d e6 e5 9a a8 6f 2b 1f c9 52 dd 02 d7 cd 9f ef 54 77 18 4d c3 b6 ef e1 a6 d5 90 1a 3e 19 d1 f5 3f 10 de 7d 8b 4a d3 e4 bc b9 65 2e d1 c4 b9 da 07 52 4f 61 55 b5 bd 3a ef 4e d4 3e c1 72 b1 c7 32 fd e5 56 0d b7 f1 15 d0 fc 2d d4 6d ed 6d f5 68 de 59 6d ae 67 b6 29 03 2b 6d 56 ff 00 64 fa 83 58 1a 4d b4 97 9a f7 d9 8f 97 e6 6e 23 f7 92 05 5f ce b9 15 59 Data Ascii: *mKC_#KE,+YtVcUQ[Gsbjw2JK+fj-gDy~7V!yv##3akP}o+RTwM>?}Je.ROaU:N>r2V-mmhYmg)+mVdXMn#_Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49772	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	375	OUT	GET /th?id=OADD2.10239370639702_1LY06F7YB2ZF9D3G5&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:14 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 634564 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 9818E0EC0FE34CA5B6BAAF729C4F8862 Ref B: EWR311000106037 Ref C: 2024-11-25T15:32:14Z Date: Mon, 25 Nov 2024 15:32:13 GMT Connection: close
2024-11-25 15:32:14 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1a a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 31 3a 32 31 20 31 36 3a 32 38 3a 30 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 25.1 (Windows)2023:11:21 16:28:028
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: 6c a6 22 16 4a 4d b5 3e ca 46 4a 40 41 b6 93 6d 4e c9 48 c9 54 04 2c b4 9b 6a 6d b4 8c b4 01 03 03 4b b6 a5 db 49 40 11 62 92 a5 db 49 b7 14 01 1d 23 0a 93 6d 1b 68 02 2a 4d b5 2e da 4d b4 01 16 da 46 15 2e da 46 5a 00 89 85 35 85 4c cb 48 cb 40 11 50 c2 a4 a4 db 40 11 ed a4 db 52 30 a4 c5 16 01 94 98 a7 d0 c3 14 00 cc 51 8a 72 d2 f3 48 68 d7 f0 1d aa 5c eb d1 87 5d db 7f 86 bd 86 c5 02 7e ec 74 5a f2 0f 03 1b 94 d6 23 fb 3a ed 2c d8 dc df 75 7d 6b d7 f4 95 73 1e 64 6d cd 5e 16 65 7f 68 8f 5f 07 fc 32 ea 2d 39 96 9e ab 4b b6 bc d3 a8 8b 65 35 97 15 63 6d 46 eb 40 10 b2 fa d2 2c 78 6a 9b 6d 2a ae 68 01 8a b4 ec 66 97 18 a1 b8 a0 06 32 d3 58 53 99 a9 ad 40 02 8a 55 41 4a 83 34 f5 14 00 d5 4a 5d 94 f5 a7 63 34 01 0e ca 19 2a 5c 51 b6 80 2b 32 d3 1d 6a cb 25 Data Ascii: l"JM>FJ@AmNHT,jmKI@bI#mhM.MF.FZ5LH@P@R0QrHh\]~tZ#:,u}ksdm^eh_2-9Ke5cmF@,xjmhf2XS@UAJ4J]c4*\Q+2j%
2024-11-25 15:32:14 UTC	16384	IN	Data Raw: d4 03 ad 4b 7f 69 3d b5 c6 25 89 a3 dd f7 77 52 2a b0 e0 57 42 b5 b4 31 d9 d8 6f 2d cd 3b cb 1b 68 da 43 7b 53 9b 23 a5 16 02 2d bf 37 34 bb 30 bc 54 ca 85 bf 86 94 c6 47 d2 80 3e df 98 40 d5 52 64 8c 37 15 88 b7 d3 8e bb aa 44 bd 62 d8 35 f3 1e c9 9e bf 3a 2e cd 20 15 56 49 f6 f2 1a a4 8e 68 df ef d2 b4 10 3f 22 9a 49 0b 52 aa 5d b9 91 76 6e cd 6c 5b db dc 35 be f9 6e 76 b7 f7 56 a8 b5 b4 69 ca 54 b8 22 3e 5a 9e 9d 03 52 c2 e8 b7 77 16 ed 25 bc ea c7 fd aa aa fa 2e bf 0c ca 65 81 a5 8f fe 99 b0 6a bd a5 6a 7f 65 93 cb 92 5d aa d5 d1 d8 de 09 d7 31 ce ac 29 7b 59 c7 a6 81 ec e3 23 9d b3 b5 96 39 17 ed 3e 7c 5f dd 5d b5 aa 91 a4 51 ef 93 76 2b 61 b0 cb f3 ed 6a 14 c1 f7 0d 63 29 f3 33 45 1b 18 49 7f 66 f2 6c f3 76 ed a6 dd 6a 36 f0 cc a3 cd 56 ad bb 8b 7b Data Ascii: Ki=%wR*WB1o-;hC{S#-740TG>@Rd7Db5:. VIh?"IR]vnl[5nvViT">ZRw%.ejje]1){Y#9>\|_]Qv+ajc)3EIflvj6V{
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: cf 7b e1 5b 49 e2 f3 06 e6 82 42 9e 5a 7e 39 dc 6b c6 23 8e cd ad d4 c9 3f 97 27 f1 7f b2 3e 95 14 96 c8 f2 32 5b 4a d2 2f 5d df 75 ab 9e a6 0e 8c b7 5a 9b 43 15 52 3b 3d 0f b1 fc 1b e3 cf 03 f8 bb ca 8f 4a d6 15 6e 64 5c b5 b4 bf 23 af b7 cd 8a dc 6b 4b 39 ee a4 b7 83 51 b6 69 62 ff 00 59 1a ce 19 97 ea 33 5f 12 d8 e9 b7 23 6c f2 ce d6 c5 57 30 36 ed ad 91 fc aa ce 95 77 ac 5b 5c 4b 2c 1a 9b 45 23 7c 92 4a d2 9d cc 33 fa d7 9b 57 2f 8a 7e e4 b4 3b 61 8c 6f 78 9f 66 dd 78 76 e1 97 72 32 d6 79 f0 bd cb b7 cf d6 be 76 d0 fe 30 fc 40 d2 b4 78 ec ad f5 af 36 18 24 f9 64 b9 84 3b c8 3d 32 79 c5 7a 07 86 3f 68 fb 39 b7 0d 7f 43 9e db 6b 01 e6 db 48 1d 7d fa ff 00 4a e7 78 5a d1 f8 5d cd a3 88 a4 f7 3d 3a 1d 06 ee 26 d9 4f b8 d2 2e 23 5f ba d9 6a 8f c1 ff 00 10 Data Ascii: {[IBZ~9k#?'>2[J/]uZCR;=Jnd\#kK9QibY3_#lW06w[\K,E#\|J3W/~;aoxfxvr2yv0@x6$d;=2yz?h9CkH}JxZ]=:&O.#_j
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: dd 3a 54 ce 4b 62 a2 9b d4 a8 b0 ef f3 23 8d 59 b7 67 cc 6e 77 2e 7d 69 77 45 0d ab 07 89 58 af 0a cd f3 37 d4 d4 9a 85 c2 5b db b4 10 45 e6 aa ae 19 95 bd 7f 2a 21 49 5a 38 fe 5d ab 22 fc b1 47 8f 9a a7 a5 d9 7d 4a 91 cb f6 98 56 48 e2 93 ef 79 71 ee c7 5e e6 99 7f 11 2d 81 b9 59 7f bd f2 d6 fc 76 f0 24 8a ee b2 46 b0 2e 59 be ea 2e 7d 07 f1 1a c4 d6 2e 23 46 8d d2 39 3c c9 18 ff 00 ac fb b8 1d c8 14 53 95 de 81 25 65 a9 95 24 2f 04 db ce dd ad f7 7f cf 4a 7c 93 94 8f 9e af f7 b6 af cc b5 66 6d 92 43 88 f6 ca 37 7d ef 2f 6e df ce a9 dc 10 93 33 a2 ed 8f a3 6e ae 95 ae e6 3b 0c be 73 1c 6a 0b 48 dd 0f f7 79 34 db 11 28 93 cc 9d 59 8f 45 5f ad 4b 72 4d c3 2c b2 33 79 6b fe d7 f5 ab 56 26 54 8f fd 6f 3b 7e 5f 33 e5 eb e9 4d e9 12 3a 8f 51 12 48 d2 3f cc cd Data Ascii: :TKb#Ygnw.}iwEX7[E*!IZ8]"G}JVHyq^-Yv$F.Y.}.#F9<S%e$/J\|fmC7}/n3n;sjHy4(YE_KrM,3ykV&To;~_3M:QH?
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: ea b4 e8 6d a4 7b a8 e3 45 59 0c 8c 02 ab 7b d7 56 cb 53 0e aa c4 4c c5 9b fb c3 f8 ab 73 e1 df 86 ae fc 45 ac 2c 45 59 6d 57 fd 64 ab 19 66 5f 61 8e f5 de 78 47 c0 7a 3e 9d 0c 5a a6 b7 6c d7 82 45 ff 00 56 df 34 2a 47 56 ea 3e 5e d9 39 a8 ae 7c 53 6f a7 47 75 1e 9c b0 69 f6 f2 49 88 96 38 19 56 6c f7 cf 70 3d ab c8 ad 98 ba 8a 50 c3 ab be e7 7d 3c 27 2b 52 a8 fe 47 6d e1 3b ad 2a c2 e1 b4 2d 12 d3 cb 48 17 f7 ad 2b 6c dd c7 52 40 fe b5 8f ab 6b 51 41 74 b0 5e dc ac f1 c4 c6 48 e4 dc ea 8a 47 41 ce 33 8a 97 c2 36 3a 85 95 af da f5 0b cd d1 ce db 97 cb f9 77 03 f5 3c 7e b5 8d f1 0a dd 2e 64 51 24 17 37 9b 72 62 8a d1 b7 32 a6 3f 88 8c f1 9a f0 29 d3 84 ab b4 dd fc ff 00 e1 cf 5a 53 6a 9e 87 31 36 9f aa 78 bf 52 64 4b c5 88 46 ac ed 23 30 db 8c f0 02 2f 3f Data Ascii: m{EY{VSLsE,EYmWdf_axGz>ZlEV4GV>^9\|SoGuiI8Vlp=P}<'+RGm;-H+lR@kQAt^HGA36:w<~.dQ$7rb2?)ZSj16xRdKF#0/?
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: 6c ee 9d 83 6d 1e cb c0 15 9f 7d 3d c4 1a a4 0e 6f be d9 36 d3 b6 0e 7e 69 3b 0e 80 67 bd 3a 7a fc 2c a9 59 6a d1 76 ce 5c c7 28 b4 89 63 0b 21 76 91 9b 76 e3 df 27 ff 00 d7 50 c6 2e 04 32 3d ec 52 46 6f 23 0e aa cd b1 70 38 00 f2 7a fa 55 1d 56 e5 20 86 da d2 78 b6 86 50 f2 6d 6d aa a0 1c f7 e0 02 7f 3a b9 f6 98 e6 f3 6e 2e ef a3 55 9f 06 db cd 6d cb 18 ec c0 f7 fa 56 8e 2e d7 26 fa 8c b8 37 12 5a c8 6d fc c9 23 82 42 ed 1d b4 03 6b 71 f7 73 eb 9a 9a dd 2f 6f 6d 63 49 60 82 2b 89 f6 f9 8a df 3e d1 9f e3 3d db d8 74 a3 c3 ec 5e 69 e3 d3 e5 9d ad 77 80 b3 b4 9c 7b ed 1c 75 eb 55 bc 58 fa 44 7a 7c 49 73 73 3d 9b 47 23 6d 6d bd ba 67 38 a6 ae e7 c9 6d 43 45 1b 91 f8 d3 50 95 63 6d 2a 15 5b 9b fe 42 f9 0c 17 6a 75 25 f3 f7 78 ae 2a e5 85 95 8e 1e 0f 22 e6 4e Data Ascii: lm}=o6~i;g:z,Yjv\(c!vv'P.2=RFo#p8zUV xPmm:n.UmV.&7Zm#Bkqs/omcI`+>=t^iw{uUXDz\|Iss=G#mmg8mCEPcm[Bju%x"N
2024-11-25 15:32:15 UTC	16067	IN	Data Raw: a5 96 3f 95 24 fe 23 9e 07 d6 9f 34 9b 4a c3 8a d0 ca b4 69 12 f1 ad e4 89 54 c5 cb 6e cd 6b 5b c5 6e 9a 2d f5 ce ef 30 c2 d1 a2 af bb 1e bf 95 45 a6 e9 d2 4f 1c 97 e6 db 70 59 04 6d e5 b6 ed ae 7b 7e 54 58 5a b5 bc 7e 56 d6 62 df bc 65 6f bb f9 d5 3e 84 f5 29 4c a2 69 3c f4 f9 76 af cc ac df 7b 15 4e fc 0f b5 28 2b ff 00 02 5f bd 53 da c8 4d d3 19 17 69 97 9f f6 5b e9 4d ba 89 04 cd f3 7f 0f dd ac 89 d6 e2 69 b0 bc b7 92 7a 7f b3 5a 36 68 f2 5a b0 8d 77 75 15 4e de ed ed a1 96 0b 2e 92 c7 e5 c8 cd e9 9c d6 b4 28 6d a1 58 9e e6 35 1e 51 75 65 cb 6d 1d 81 f7 a7 2b 58 a8 95 74 d5 8e 28 65 df b9 7f d9 5f 4a a9 a8 14 91 a4 3b 5b e5 51 b5 7f bb 53 a9 8a 18 54 6e f2 e4 db 96 f3 3e eb 1a 87 52 94 c8 b9 91 97 0a bf 75 7f 8b f1 a2 c5 74 31 37 05 65 07 a5 59 b6 25 Data Ascii: ?$#4JiTnk[n-0EOpYm{~TXZ~Vbeo>)Li<v{N(+_SMi[MizZ6hZwuN.(mX5Quem+Xt(e_J;[QSTn>Rut17eY%
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: de fc 6b 3f e4 59 30 ed 5b 7a e8 f3 5a 41 67 13 6d 81 42 2a aa fc cc 07 53 c5 64 e9 fe 62 5c 46 e8 ab 24 9b be 55 65 dd fa 57 da 45 24 b4 3e 76 5b 9a f6 22 6b 78 e4 b5 8a f1 ad ad af b1 e6 6e 5f f5 98 f6 1e 95 f4 17 ec f1 6b 6f 65 e1 1f b4 a6 a1 73 a8 5b d9 c8 4e 97 04 f6 c7 62 c8 4e 59 cf a8 c8 1e d9 f5 af 9e f4 ad 36 e7 56 f1 07 91 02 ed 93 97 91 64 60 ab 1e 3a 9e dc 0a fa 87 c1 a8 67 f0 6d 8d 84 76 d2 49 e7 c1 b3 4f 55 c4 63 8e 9f 2a fa 93 9c 9a f9 0e 28 c7 4b 0d 46 30 a6 f5 96 ff 00 d7 f5 d4 ef c0 45 b9 df b1 d5 f8 6e 1b 9d 52 48 2e a7 68 e0 b6 5d d2 48 b1 41 b3 71 3d 36 8e 06 3d 05 45 ab 5e 9b cf 15 59 cf f6 69 22 55 52 16 e6 55 3b 63 45 fb ea 83 d4 e7 93 d6 ae c3 e2 39 74 6b 58 f4 ed 42 29 1a e6 ea 4f b3 44 d6 39 79 b2 bd 77 1e 88 3e 9c d6 05 8d cc Data Ascii: k?Y0[zZAgmBSdb\F$UeWE$>v["kxn_koes[NbNY6Vd`:gmvIOUc(KF0EnRH.h]HAq=6=E^Yi"URU;cE9tkXB)OD9yw>
2024-11-25 15:32:15 UTC	16384	IN	Data Raw: ab 07 97 04 f0 f9 92 2f c9 23 aa e4 82 d8 3b 39 1d 7f 5a e8 df 11 aa a5 84 0a d6 d0 45 e5 b5 ca af 92 d0 9c 70 aa 80 67 81 de b3 b5 4f 0c c1 ac d8 d8 9b 88 a0 6b 78 24 26 fa 5f 33 62 49 c6 02 b6 7d 38 1c e3 9a f9 9c 24 d4 71 31 a8 fa 7f 5a f9 9e ce de e9 bd f1 11 a2 f0 cf 82 f4 34 d4 35 7f b7 34 9a 6c 6f 77 2b 62 67 c3 a0 66 c3 71 85 c8 08 aa a3 3d 3e b5 f3 a7 c4 5f 89 9a e6 9d 7d 3c 1e 12 d6 67 b3 b0 b6 8c 88 e3 5f 7e 18 e4 12 32 49 3d 0f 15 df 7c 56 b8 f1 7f 8b bc 17 63 73 a5 4b a4 e9 f6 37 97 22 c2 d1 a3 bb 32 4d 7c 63 3e 5e 55 48 c4 31 2a 8e 49 3c d7 8f 69 be 03 bb d4 bc 44 ba 14 fa 9e 97 6a 5a e4 db 2d cc 93 ec 56 d8 f8 62 17 af 27 a0 20 66 be bf 2d c1 61 ef 2c 45 6b 37 ae 9d ba ea bb a3 87 1b 52 72 92 8c 34 f3 30 6e 3c 51 79 3e 93 6d 1c 70 41 03 40 Data Ascii: /#;9ZEpgOkx$&_3bI}8$q1Z454low+bgfq=>_}<g_~2I=\|VcsK7"2M\|c>^UH1*I<iDjZ-Vb' f-a,Ek7Rr40n<Qy>mpA@

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 40d9340c-a01e-0050-06b8-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153214Z-178bfbc474bmqmgjhC1NYCy16c00000007p000000000mn34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 5931471e-001e-0046-7a23-3dda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153214Z-174c587ffdfp4vpjhC1TEBybqw000000061000000000skvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b12c7864-501e-007b-43bf-3e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153214Z-178bfbc474bvjk8shC1NYC83ns00000007g000000000d39f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:14 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6ea5360a-801e-002a-4904-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153214Z-178bfbc474bh5zbqhC1NYCkdug00000007fg00000000rtw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:16 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: aaf2b452-f01e-0071-621c-3e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153216Z-178bfbc474btvfdfhC1NYCa2en00000007ng00000000ng8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:16 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:16 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c569ec8c-a01e-003d-0e22-3d98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153216Z-178bfbc474bmqmgjhC1NYCy16c00000007t0000000006uu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:16 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:16 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 9a3ed3ee-501e-00a0-41c6-3e9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153216Z-178bfbc474bp8mkvhC1NYCzqnn00000007hg0000000070s6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49781	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:16 UTC	346	OUT	GET /th?id=OADD2.10239339388243_1PE95YU5XQVT2G1QH&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:17 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 463022 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 895AA555D06248D49C51E981423084DE Ref B: EWR30EDGE0813 Ref C: 2024-11-25T15:32:16Z Date: Mon, 25 Nov 2024 15:32:16 GMT Connection: close
2024-11-25 15:32:17 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 31 31 3a 31 38 20 31 33 3a 35 32 3a 30 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.0 (Windows)2022:11:18 13:52:018C
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: 8c 1d ee 44 82 9f b7 35 22 c7 fd da 08 c5 3e 68 8a d2 1b 8c 35 19 c5 24 8d 8a 45 a7 a0 87 af ad 4a ad 50 bb 63 8a 6a b1 35 0e 2d 9a 47 42 7d d4 29 a8 f3 eb 4b f2 d3 e5 21 c9 13 2b 11 d2 86 7f ef 54 6a 69 73 9a 5c a2 f6 9d 87 6e 3d 69 33 ef 49 9e d4 dd be f4 7b 31 fb 5e e3 99 a9 55 a9 9d 5b 8a 46 e1 a9 72 95 ed 19 23 37 6a 46 63 de 93 e6 a6 f4 a0 af 78 93 fb c6 91 4d 35 4f cb ef 47 26 a1 e8 5c 53 68 95 58 53 b3 8a af 83 d6 9e 87 3f 5a cb 52 ec 89 b7 63 af 5a 6b 35 37 3f 2e 4d 35 ab 68 dc ca 72 48 52 d4 9f fa 0d 20 1d e8 6f 7a e8 89 c9 29 5c 72 8a 5c e5 a9 3a 2d 0b 54 40 52 e3 e5 f9 a9 69 36 fc b8 a0 04 61 46 3d a9 df c3 9a 18 d0 1a 8d c7 b5 18 cd 3b 3e f4 63 da 80 1b 8c f1 da 97 02 9d 8a 4c 7a 50 02 7d 29 3f 9d 39 78 a2 80 13 f8 69 31 ed 4e a3 1e b4 00 9d Data Ascii: D5">h5$EJPcj5-GB})K!+Tjis\n=i3I{1^U[Fr#7jFcxM5OG&\ShXS?ZRcZk57?.M5hrHR oz)\r\:-T@Ri6aF=;>cLzP})?9xi1N
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: 50 61 49 8f 4a 56 1f 2d 1d 28 28 4e b4 b8 c2 d2 a8 ef 4a c3 d7 ad 00 37 14 b4 b8 a5 c7 b5 00 35 47 cd 9a 29 ca 29 79 a0 06 63 2b 42 d3 ff 00 e0 74 28 26 80 1a a2 95 85 2a 8e d4 b4 00 d5 e2 93 8f e1 a7 6d ca e6 97 1f 2d 00 37 1e d4 aa 3f 2a 5c 7a 50 de 94 00 98 34 62 9d ec 29 31 95 c9 a4 80 6e 31 d2 91 85 3b 6e 29 71 ea bc d3 01 bd 29 5d 71 4b b7 fd ba 5c 7c b4 ae 04 6a 31 f4 a5 c7 b5 3f 60 ed 42 83 4c 06 e0 d2 75 a7 f2 28 61 40 0d 51 47 4a 52 31 da 95 97 2d 45 d0 0d 51 46 29 5b da 9c a3 e5 c5 00 35 87 e7 40 1b a9 f8 14 7b 52 b8 0d c7 cb ba 91 86 38 a7 ff 00 df 14 98 f5 a2 e0 37 f8 68 a7 28 3b b3 4a c0 0e 69 80 cf 63 4e 61 8e 94 e5 ff 00 c7 a8 a5 70 19 83 4a c0 9f a5 3f 9a 17 df ad 17 01 b8 f5 a3 6f 7a 77 f0 fb d1 9a 57 60 22 e4 50 cb 9e 45 14 b8 34 00 60 Data Ascii: PaIJV-((NJ75G))yc+Bt(&m-7?\zP4b)1n1;n)q)]qK\\|j1?`BLu(a@QGJR1-EQF)[5@{R87h(;JicNapJ?ozwW`"PE4`
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: 54 ba b5 66 66 cf c9 9d e9 ff 00 8e b5 71 fa c5 e0 96 e1 b5 79 e2 db b5 43 f9 4a bf 2b 01 c0 03 d4 9a ea fe 09 a4 69 e1 1d 4b 6b 33 4b 26 b3 24 d2 33 2e df bf 1a 10 3f 01 c5 7d 17 0d bb 62 97 a3 3e 73 8a 21 7c 07 a3 47 4f 22 e2 9a b8 15 24 94 c5 53 5f a0 9f 9c 5a c2 37 dd a2 31 df bd 3e 8a 07 6d 42 8c 7b 51 8f 6a 5f 6a 06 26 d1 46 3d a9 73 9a 46 a0 04 51 85 a5 6a 28 e8 b4 00 74 a3 de 8f a5 0d 4a e0 14 51 46 7d e8 ba 00 a2 8a 1a 98 08 b4 b4 51 40 07 d6 8a 28 cf bd 2b 80 7f 16 68 a2 97 34 b9 90 59 82 8c d2 51 4b fc 34 73 15 ca 0b 4b 4d a2 8e 62 85 cd 19 f9 68 51 de 96 95 d8 0d a2 9d 45 2b b0 31 70 3f 1a 5c 0e a2 8e 68 6e 7e b5 ad ce 3b 30 63 42 8a 5c 7b 53 69 15 ca c5 5c 52 ad 14 63 fe f9 a0 39 43 ad 18 f6 a2 97 14 0e c2 75 e6 97 18 e9 4b 45 03 0c 61 68 c7 Data Ascii: TffqyCJ+iKk3K&$3.?}b>s!\|GO"$S_Z71>mB{Qj_j&F=sFQj(tJQF}Q@(+h4YQK4sKMbhQE+1p?\hn~;0cB\{Si\Rc9CuKEah
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: ec f6 12 f9 ad 1e d2 ca b9 6f 2c 92 31 9f 7a f7 2b c3 9b 86 3b b7 06 c1 fd 05 79 4d f7 83 af ee a3 5b 69 fe cc b6 97 59 3f ba 90 ee 6e 79 dd c7 15 e8 6d af da 0b 77 94 d8 c8 ab 1e d4 55 f3 07 cd c6 3a fb 62 bd cc af 1d 87 a1 19 2a 92 b1 e1 e7 38 5a d8 89 41 d2 8d d6 a5 a6 1f 35 5c b3 b6 de ad 9f 94 56 15 af 8a b4 eb 9d 51 74 f8 34 ad 41 a5 da 5d 99 76 15 50 3a 93 ed 56 2e 3c 5f 61 67 0f 99 2e 9d 3b 2a e3 fe 5a 7c d8 3d c0 af 59 e6 f8 4b 27 cf b9 e4 47 29 c6 de ce 9e a6 a7 d9 c6 ea 57 b6 c2 d5 09 bc 52 06 a5 25 a4 1a 46 ef 2f ef 34 93 fb 67 d2 a9 ea de 37 92 db 49 b6 b9 1a 2c 72 3d cc 72 3a ee b9 2a 98 53 8c 8e 32 73 da a7 fb 63 09 fc c5 2c a7 16 ed ee 6f e6 8d 80 19 78 a4 65 dd fe cd 62 58 78 aa 5b dd 06 7d 46 3d 22 08 24 b6 65 f3 23 96 72 cb 86 e8 78 15 Data Ascii: o,1z+;yM[iY?nymwU:b8ZA5\VQt4A]vP:V.<_ag.;Z\|=YK'G)WR%F/4g7I,r=r:*S2sc,oxebXx[}F="$e#rx
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: e5 a9 9a 6d f6 be 66 d5 cb 73 f7 7e 6a cd 90 9f 9a 05 5d a3 82 cc df 2f 5a e7 44 42 fb 91 10 e5 be 45 68 f6 ff 00 e3 df 4a b5 a7 a0 8e 46 13 af 98 19 48 6f c7 d6 a2 45 0b 74 a4 cb f2 ed cf fb 54 e4 5f 36 66 7d db 42 af de a6 54 9d cb 36 b6 76 09 32 a2 aa b4 7b 7e 6d df c2 7d ab 99 f1 2d 88 b7 f3 6f 11 5a 58 55 b0 cc ab 96 51 db f0 ad c5 8a 29 5b 64 91 37 aa b6 ef 4e f5 24 66 28 a1 d9 bb 72 b7 0d fe d0 f4 35 a4 26 d3 26 cd 3d 19 c4 24 41 fc bf bd 2b 2f cc ab fc 3c f4 ad 9b 48 24 86 cd 51 fe 6d bc b2 ed fe b4 9a 95 a7 d9 6f 16 7b 0f f8 f7 5f bd 13 37 dd 1e ab 5a 08 f1 cb 63 1c f6 fb a5 5f e1 6f f3 de ba 25 aa 31 a8 d9 85 7f 33 c9 27 97 b5 63 ff 00 67 f8 9a 8a 9e f2 04 79 16 37 f9 a4 6e 5b fb ca 3d fe b4 54 9d 14 92 e5 3d 03 03 6d 0a 31 52 30 f9 7d e8 50 45 Data Ascii: mfs~j]/ZDBEhJFHoEtT_6f}BT6v2{~m}-oZXUQ)[d7N$f(r5&&=$A+/<H$Qmo{_7Zc_o%13'cgy7n[=T=m1R0}PE
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: 7e 7b 7c a1 9b fe fa 3e f5 c7 1c 67 b2 6f d9 2d 7b 9b 4b 96 d6 48 ca f0 9f 86 b4 ad 13 4f 8b 4e d1 ec 62 b5 b6 8b 23 72 ae e7 6f f7 89 eb 5a 92 5b 8f 33 ca 8d 55 be 6a b5 1e 0b 61 3e 50 b5 5a 46 c3 7f 78 ee fe 1f e1 ae 3e 77 27 76 ee c8 bb b9 04 c8 76 b6 7e 51 bb f8 a9 8c a5 39 0b b8 ff 00 e8 35 35 d6 7e 60 17 fd ef f6 aa 36 39 8e 83 48 b1 62 61 b9 43 ae e0 df ce 9f 26 0f fb 3b 57 fb b5 1c 61 04 7b cf 4f ef 56 7e b1 aa c5 69 0e 6e 1b 68 6f f5 7b 7d 6a 94 5b 1e ef 43 49 5b e5 c2 7c db bf 86 ab 48 f2 c9 fb bd bc 7f b3 ed 58 b0 ea 52 de 4c de 5a 4e ca dc 33 fd d5 5a a1 e2 4d 78 e9 96 32 4b 2d e4 10 04 5f 9a 46 90 0f d4 f6 ad 23 4d c9 d9 6e 57 2f 2e ac d3 d4 ae ed 6d ad e4 f3 25 e7 fb db b6 ae 7d 39 eb 5c d6 ad e3 3d 3e 0f 92 49 f7 15 6f 97 6f cc df 95 79 ad Data Ascii: ~{\|>go-{KHONb#roZ[3Uja>PZFx>w'vv~Q955~`69HbaC&;Wa{OV~inho{}j[CI[\|HXRLZN3ZMx2K-_F#MnW/.m%}9\=>Iooy
2024-11-25 15:32:17 UTC	16065	IN	Data Raw: 22 5e 2c 72 7f 14 6d 95 75 f7 20 d6 a4 3a d9 75 c2 6a 31 b7 fb 5b be 55 ac 25 82 b1 b2 9c 5a 3d 2d bc 55 65 bb 79 8a 75 97 77 ee d7 f8 5a ac 69 f7 e2 f3 73 be d5 66 5f 99 77 7c d5 e5 97 1a 95 c7 cc 44 b1 b6 e5 fb cb 4d 87 51 d4 36 e0 44 cc aa c3 77 cc 69 7d 51 58 7e ef 43 d8 1f 78 55 26 5e 1b fb b4 e7 44 e9 f3 7c bf ed 57 95 2f 8c ae ec 7f e3 e6 59 77 7f 77 6e ff 00 c2 a5 4f 8a 76 36 ad 8b 8b 39 db 6f f1 32 9d b5 1f 53 aa fe 14 4b 69 75 3d 26 ea 62 bf bb 1d 57 9d ab 50 26 a1 34 4b 20 0d e5 6f fb dd 17 fc 8a f3 4b af 8a f6 d7 0c de 54 53 c0 ad f7 bf 76 5b fa 53 21 f1 ed 81 da 81 24 6d cb fd de d5 7f 53 aa 96 b1 14 65 16 77 e9 31 92 6d f2 4b b8 2b 7d df ef 54 8f 78 11 72 dd 17 ee d7 11 67 e2 cb 76 65 fd d4 cb fd d6 65 db 5a 36 de 21 b0 6d ad bb 71 66 fb ad Data Ascii: "^,rmu :uj1[U%Z=-UeyuwZisf_w\|DMQ6Dwi}QX~CxU&^D\|W/YwwnOv69o2SKiu=&bWP&4K oKTSv[S!$mSew1mK+}TxrgveeZ6!mqf
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: 48 b8 fe 1f 97 1e d4 e9 a6 09 23 2a 49 bb e6 1f 34 78 6d d5 0d cf da 04 9f 67 f9 7c b5 6f 97 6f de 6f a9 ef 4d b7 f9 26 62 3c bf dd b7 cb bb 85 6f ff 00 55 66 e5 71 a8 a2 c4 9b 0a b1 76 da cb cf f7 68 b0 88 9f 32 35 95 73 d5 b7 7c cd 49 1f ef e6 91 24 8f e5 6c 1d db 69 cb 96 8f 88 99 7c be 17 e6 db bb eb eb 52 0f 45 60 62 e2 3c be e5 4f ee ff 00 0e 6a b2 05 3c 3f f1 71 fe f5 58 b8 2e 16 33 22 b7 fb 2a b4 2a 21 b8 c2 33 2f 45 5f 96 80 d8 45 50 57 cb f9 9b ca fb bb 7e 6f ce a3 90 aa ee f2 f6 e2 5f bd 1a fc df 95 2c ad 86 64 93 a3 36 29 19 77 42 aa 3f 85 7f d6 7d d6 5a 68 3a 15 2e 23 90 5c 30 81 7e 56 5c 7c bf af e1 50 45 14 82 1f 2d 19 97 6f ce d1 aa fe 3f 8d 5c 50 5a 4c c9 f2 cb 12 e5 1a a2 99 a6 5b 39 3c cd ad fd e5 5e bc 7a 1a 65 a7 d0 90 c3 6e ea c6 19 Data Ascii: H#I4xmg\|oooM&b<oUfqvh25s\|I$li\|RE`b<Oj<?qX.3"*!3/E_EPW~o_,d6)wB?}Zh:.#\0~V\\|PE-o?\PZL[9<^zen
2024-11-25 15:32:17 UTC	16384	IN	Data Raw: ec db 3c 7a 7a fd 97 c7 16 32 6a 2b c3 43 25 a3 2d bf fd f7 9c fe 95 c0 78 f3 e1 27 8e fc 31 0b dd 6a 5a 7c 13 da c1 cb 4f a7 cb e7 2a 8f 56 41 f3 63 f0 af ab 23 99 24 9b 21 59 4b 36 df 97 8d bf 5a b2 cc e1 9a 53 f3 15 5d 9b b6 f3 8f f0 ae 7a 39 e6 2e 12 bc 9d d1 75 72 9c 34 96 8a cc f8 2d e3 7f b8 3e 61 fd d5 fe b5 1b 42 dd ba 7f 7a be b8 f8 87 f0 af c2 7e 2e 8d ae 1e d9 b4 ab bd d9 5b cd 3e 30 ac c7 b7 98 9d 1d 7f 5a f9 eb e2 8f c3 af 15 f8 32 66 92 f6 c5 a7 d3 bf 87 50 b4 52 d0 e3 fd bf ee 1f ad 7d 2e 0b 35 a1 88 f7 6f 69 76 67 81 8b ca aa d1 d5 6a 8e 2f 71 8d a9 56 52 cd f7 77 1a 8e 4e 17 79 db f3 7d da 8d cb 2f 4f e2 af 53 46 79 3a a2 db 30 6e bd 3f d9 a9 56 40 cc a0 2e e6 fe 15 fb ab 55 6d b3 bb e7 46 cd 5f b2 48 c2 b1 2a bf 37 2a ab f7 aa 24 69 12 Data Ascii: <zz2j+C%-x'1jZ\|OVAc#$!YK6ZS]z9.ur4->aBz~.[>0Z2fPR}.5oivgj/qVRwNy}/OSFy:0n?V@.UmF_H7*$i

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:16 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9053a11e-c01e-0046-640f-3d2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153217Z-178bfbc474btrnf9hC1NYCb80g00000007wg00000000387z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:16 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 4246a62e-c01e-008e-5315-3d7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153217Z-178bfbc474bpscmfhC1NYCfc2c00000006a0000000005rxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49783	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:17 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 4f 47 36 57 41 62 72 4b 6b 57 54 46 31 69 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 31 32 64 36 61 62 30 37 36 34 38 66 61 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9OG6WAbrKkWTF1in.1Context: c312d6ab07648fa7
2024-11-25 15:32:17 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 15:32:17 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 4f 47 36 57 41 62 72 4b 6b 57 54 46 31 69 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 31 32 64 36 61 62 30 37 36 34 38 66 61 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 31 51 41 66 4f 79 6d 76 64 73 71 50 7a 54 33 78 51 2b 33 59 30 73 4a 6f 6e 42 68 72 58 50 44 74 4d 42 67 30 58 63 6b 68 75 45 44 46 7a 4a 43 4f 6b 67 39 45 7a 39 49 78 6c 39 6b 6e 6f 46 55 70 32 34 59 61 45 6d 56 38 2f 65 79 2b 72 56 70 78 62 45 61 33 4e 69 47 52 2b 64 39 32 39 4b 34 79 79 51 50 56 4b 4c 76 59 55 61 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 9OG6WAbrKkWTF1in.2Context: c312d6ab07648fa7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeU1QAfOymvdsqPzT3xQ+3Y0sJonBhrXPDtMBg0XckhuEDFzJCOkg9Ez9Ixl9knoFUp24YaEmV8/ey+rVpxbEa3NiGR+d929K4yyQPVKLvYUaS
2024-11-25 15:32:17 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 4f 47 36 57 41 62 72 4b 6b 57 54 46 31 69 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 31 32 64 36 61 62 30 37 36 34 38 66 61 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9OG6WAbrKkWTF1in.3Context: c312d6ab07648fa7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 15:32:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 15:32:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 2b 59 6c 35 6d 68 50 76 55 32 68 6e 44 43 6f 4d 67 44 78 39 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: g+Yl5mhPvU2hnDCoMgDx9w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49784	13.107.246.63	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:18 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:18 UTC	797	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: application/x-javascript Content-Length: 49911 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: e6cfe59e-201e-0021-47ce-3de72d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241125T153218Z-174c587ffdftv9hphC1TEBm29w00000005yg00000000ucum x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:18 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2024-11-25 15:32:18 UTC	16384	IN	Data Raw: bb 0c 77 90 36 70 02 a2 23 27 68 d7 13 77 83 5b ce 75 c8 5d 1e 38 7e d8 ef 65 93 b7 51 ba 99 a3 99 6e c4 c1 49 25 dd 80 44 6f 6d d6 5b f8 24 0d de 5f 42 cf db 25 c7 07 20 5b 70 93 25 fa 4a f2 b1 09 72 79 ab 24 b3 29 e5 95 16 1b 3c 9b e3 f6 1e bc 63 2b a7 73 9c 09 3c 7b 87 34 0e 7c c0 b3 7e cf c4 83 50 e7 60 ac d8 21 42 fd 4d eb 90 1b 4e 38 90 99 77 8e e0 d0 a6 2f bd 49 a2 b4 57 da 5c 87 87 25 cd 61 58 8e c4 2d 4e ad 5b 1a 28 47 10 3f 31 5a 3e 44 bc 65 2b c5 c3 87 fc 45 47 b6 f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 16 60 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f 0c ce 10 8a e3 b7 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa Data Ascii: w6p#'hw[u]8~eQnI%Dom[$_B% [p%Jry$)<c+s<{4\|~P`!BMN8w/IW\%aX-N[(G?1Z>De+EG{wRws8X{.*}u<iT@0TS2}`JC.?II(AY6Kd
2024-11-25 15:32:19 UTC	16384	IN	Data Raw: 6c 5a 04 6d 94 02 7c 5f 33 90 18 0e f6 15 fb 9f fd c2 2d 7c f6 09 99 56 e0 1b df 55 00 e9 61 19 a9 ae 08 b4 08 de 5e 5e 8b 45 87 04 e9 6b b8 4e 14 17 ac 44 38 17 c4 11 e4 15 f5 05 82 e4 5a e1 00 e1 b1 7a c3 5a 2a cb eb 40 53 54 ab c1 7c ad ba a5 5c a6 6e 38 df 2e 84 c6 0f 51 3b 3d 74 de 84 36 7f d1 36 c8 68 2e a7 19 09 6f b4 0d 8a 69 11 fc 25 99 f6 55 32 25 02 a3 cd f2 e5 b9 1f 5a 92 03 c5 6a 6e d0 c6 ff b1 0d 05 a2 16 7e 06 11 d8 2f e6 d8 0b d6 12 91 54 cd 2a 90 95 47 9c 89 ce 07 af 7b 17 a7 3f 3f c1 8f fe 53 46 e8 38 88 e1 92 f5 d4 34 4b ca ff d8 a1 26 dd bc d2 22 ad b5 44 6f f6 c3 ab 20 de c6 32 0d 70 78 26 6a f3 08 a8 73 81 d6 01 20 73 48 80 a3 ea 25 4e 2a 1f eb b1 f6 d7 5d 21 e3 43 50 cc 65 af 1d a9 f7 78 ab d5 9d ad 16 9b 6a 23 b0 19 6a 77 87 19 d4 Data Ascii: lZm\|_3-\|VUa^^EkND8ZzZ@ST\|\n8.Q;=t66h.oi%U2%Zjn~/TG{??SF84K&"Do 2px&js sH%N*]!CPexj#jw
2024-11-25 15:32:19 UTC	1556	IN	Data Raw: c8 f9 f6 eb 34 7d f4 dd 37 c9 ee f7 8f f6 e2 dd 6f 66 df 7e bf fb 7d f2 f5 de 6e fc a7 bd af f7 bf 9d 3d fa d3 77 5f ff c9 21 56 2a a5 73 b5 26 36 2a 27 82 5f 12 0b 55 10 07 45 ac c1 2c da 23 56 89 cf dd 43 f9 73 20 7f 9e 75 9c 76 3f 1a ef 92 4a 90 bf 91 22 52 db 77 24 13 55 ce a9 1a 01 89 98 e7 e9 12 09 35 70 a9 69 d1 8b 04 3e 39 b8 03 34 3d 1a 1b f6 0d 11 dc b4 09 a7 5a e3 8c 8b a0 d8 8e 04 67 bc 91 4c 62 e2 2d 07 7e 93 24 60 c7 c4 68 e0 da 03 1d 6c 3c 21 5c 7a 3a 4f b3 ab 34 19 29 dd 15 7b 6b c9 37 46 ce 38 f3 54 8a b9 ab e3 f2 64 a2 b4 95 f8 ed 6f a1 2d 95 5b 98 f6 b3 12 95 75 5d 1b eb 28 7f d3 8a 79 02 81 cc da 41 13 ca b3 45 0d 0a 89 e2 cd 78 84 e3 f1 cc c7 60 84 29 31 ff 70 62 90 50 0e 31 a6 45 b5 e7 53 db ac f1 3b a1 c9 6b 77 f7 30 e5 18 a3 e1 de Data Ascii: 4}7of~}n=w_!Vs&6'_UE,#VCs uv?J"Rw$U5pi>94=ZgLb-~$`hl<!\z:O4){k7F8Tdo-[u](yAEx`)1pbP1ES;kw0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:18 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:18 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 52ac3eb7-c01e-0079-7e4e-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153218Z-15b8b599d88g5tp8hC1TEByx6w000000061g00000000h5d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:18 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153219Z-178bfbc474bwlrhlhC1NYCy3kg00000007hg00000000sbwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:18 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 6e56f893-501e-008f-2178-3d9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153219Z-15b8b599d88pxmdghC1TEBux9c00000006bg000000000umc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:18 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: fe2375f7-e01e-0052-5cea-3ed9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153219Z-15b8b599d88n8stkhC1TEBb78n00000000xg00000000k3ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49793	20.223.35.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:19 UTC	2591	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20241125T153215Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=7ef301432d4c41e7ae26c32d9731847c&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=601034&metered=false&nettype=ethernet&npid=sc-88000045&oemName=qhtxmf%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=qhtxmf20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=601034&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1& [TRUNCATED] Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: z56ILO4WqECRd1ef.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2024-11-25 15:32:19 UTC	955	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 2945 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116216-T1-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"65792"},{"REGIONALPOLICY":"1"}] X-ARC-SIG: AIMw4om/oZHJiMImis4R499VXesqrCfFpWJbLhev/ynYCReqvYzJU6NnBHrlMemxPiJq5wlEqUxeRLUGvwmlY20DvH3T8fNPmxOuKpfXZ7hcvxFJYDdRh3vlCJC9kXJBzKHrfD7CWnmlbVjV6A1qzgPxC1dnPZPsc9QJNOjMWkMdyFQxQTB2D1rXT2fecqHkHqCr6wxN6B1OHS3p/+vLDjyXdweez+8DTg2aHPAfq72RTDKtW7FZxok5G/TX5bANTu0bDW5Z3Yi2xvZ4S7y4WjXc9L2hpDHuoHANwNB3T5uAh5SuMC7bBbeR2Tz11jlehVvfx5YfjmaCgy58ZeszlA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 25 Nov 2024 15:32:19 GMT Connection: close
2024-11-25 15:32:19 UTC	2945	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 09788b64-001e-0046-6eb7-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153219Z-178bfbc474bwlrhlhC1NYCy3kg00000007r000000000633u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49795	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:19 UTC	346	OUT	GET /th?id=OADD2.10239360265014_1I9L6MC65FHDFQ9Z7&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:19 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 195935 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: DBBFFF73A6A24BC0ACDA2B556799082B Ref B: EWR30EDGE0219 Ref C: 2024-11-25T15:32:19Z Date: Mon, 25 Nov 2024 15:32:19 GMT Connection: close
2024-11-25 15:32:19 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 32 3a 34 31 3a 35 38 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 22:41:588C
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: ff 00 a5 18 a0 fd 28 5e ff 00 5a 00 4a 4c 71 fc a9 d8 27 bf d2 91 85 34 02 2f dd a5 c7 b5 2e 09 e9 f8 d2 ff 00 9e 94 c2 e1 da 93 18 e4 52 fb d1 c5 48 0d c7 b7 6a 5c 67 ad 2f e3 40 14 05 c4 c7 7a 3e b4 e0 3d a9 17 39 a0 42 11 fe 4f 6a 4a 7f 56 a0 8f fe b5 3b 85 c6 af f3 eb 4b 4b 8f 9b a5 18 e9 48 04 fa d1 8c 0c e0 d3 b1 ff 00 ea a2 81 0c c5 18 a7 63 ff 00 af 40 fa 1f c2 a8 2e 26 28 e8 78 34 e0 39 cf ad 1d 29 00 98 e6 93 b6 69 df 9d 07 d3 f2 cd 30 0c 76 cf e5 45 2d 2e 29 58 57 1b 46 3f c8 a7 52 62 8b 05 c3 19 ed 48 b8 e6 9d 49 8c 50 01 ef 43 52 e3 8c 51 cd 02 0c 7f fa e8 a0 f5 a2 98 19 f4 63 22 97 8a 2b 23 ae e2 63 fc e6 8c 53 a8 c7 b5 31 5c 6e 3f fa f4 b4 a4 7d 28 ed 40 0d c7 ff 00 5a 97 02 97 1e d4 7d 28 01 05 2f e1 47 1e 94 77 a0 03 f0 a4 ef fe 34 a0 7d Data Ascii: (^ZJLq'4/.RHj\g/@z>=9BOjJV;KKHc@.&(x49)i0vE-.)XWF?RbHIPCRQc"+#cS1\n?}(@Z}(/Gw4}
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 18 5a 74 75 5b f7 25 92 ee 46 62 c6 47 91 9c f2 59 89 62 7d 49 3c 9a 8e 49 65 3d 4f e1 9a d8 d1 ec 6d 61 91 6e 2f 23 69 a3 0d f3 a2 36 30 31 eb f5 c5 53 d4 56 0f b4 b1 b7 50 a9 9e 3e 95 8c 5a 6e c8 eb 94 6c 94 99 4d 4b fa 1f 70 2b 53 45 b6 37 4a b1 ae ef 30 c8 3e 6c fc a0 7d 3f ad 51 58 fd 5b bf a5 69 e9 97 3f 63 5d e8 48 63 8e 7e 9d bf 41 4e a2 7c ba 0a 9c e2 a6 af b1 d2 5b e8 d1 41 0f da f1 b2 de 36 5f 3d d9 b0 5f 9f 99 40 ce 78 a8 35 4f 14 0b 1b b9 a2 d1 91 15 59 be f2 e4 0c e3 07 fd e0 7a 8c f2 0f 22 b1 af b5 2b 9b ab 76 8d a4 0b 18 25 82 8e 32 4f 53 fa d2 68 ba 36 ad ab 43 24 da 66 91 7b 7b 1c 27 f7 8f 6f 01 61 f9 8e fc 57 2a a2 be 2a ac ed 96 32 4e d0 c3 44 4b 8b fb fd 49 63 86 f6 ea 4b 81 09 26 31 21 ce dc f5 fc 78 ad fd 1e fe 6b 7b 55 82 17 58 50 Data Ascii: Ztu[%FbGYb}I<Ie=Oman/#i601SVP>ZnlMKp+SE7J0>l}?QX[i?c]Hc~AN\|[A6_=_@x5OYz"+v%2OSh6C$f{{'oaW**2NDKIcK&1!xk{UXP
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 57 4a 72 a8 03 21 86 e5 ea 3d 68 b8 87 5b a6 e6 0b 9d a7 39 06 b4 6c dd 62 91 46 46 dc f5 3d 85 50 87 06 65 c9 3b 73 c9 f4 15 36 dd a7 2a df 74 f0 7d 6a 25 a9 74 e5 ca d3 35 9e 58 de 05 3f 7b 23 a8 ec 68 b5 c9 75 d8 5b 6b 77 3e 95 53 4e f2 ce f0 58 e0 f4 07 b1 ab 31 a3 26 d0 0f 00 f1 93 d2 b9 a4 ad 74 7a b4 ea b9 59 b3 5a c6 71 fc 64 6d 07 bd 6b 5b 4b 85 c6 ff 00 9f b0 c7 5f ad 60 59 80 ca 33 d5 4f 3e 86 af 5b ce dc 0c 8f 63 8e 95 cd 38 ea 7a 14 ea d9 1d 2e 93 78 63 b8 50 02 ed 6e 00 1d ab 7a d6 7f 2c 12 a7 71 24 64 9a e3 74 f9 48 70 e3 ef 2f 4c 7d 6b 6a 0b ae aa 72 d9 e9 cf 5a e4 ab 4e e7 6d 1a da 1d 43 5c 2b ae e4 f4 ee 6a 6b 5b 82 8e 4a be 79 eb d3 f3 fc ab 9c b7 99 bc bc ff 00 77 a0 07 9a 9d 27 62 c4 e3 ef 0f 5a e4 95 3e 87 7c 2a 5f 53 a4 7d 50 6d 60 Data Ascii: WJr!=h[9lbFF=Pe;s6t}j%t5X?{#hu[kw>SNX1&tzYZqdmk[K_`Y3O>[c8z.xcPnz,q$dtHp/L}kjrZNmC\+jk[Jyw'bZ>\|_S}Pm`
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: aa 4e ec f3 fe 34 bd 3f ad 04 8a 1b d2 85 f5 c5 27 4e df 95 19 cf 34 d0 87 03 f5 f6 c5 38 49 81 c0 e8 38 04 54 79 39 cd 26 79 f4 a4 16 27 57 20 e4 1c 71 ce 69 f1 3b 29 38 fe 2f 51 55 f2 7b 82 7d f3 53 41 ce 09 23 f1 34 3d 83 5e 85 eb 59 08 90 06 3b 82 9e 4e 3f 9d 68 5b 10 72 ab 91 83 91 9e 95 8e ae 17 04 03 ed 57 d6 72 b1 ee 89 c9 1b ba e7 f2 cd 63 28 b6 77 52 a9 18 dd be 86 fc 32 c6 8c 77 a8 1b 80 e1 86 40 fc 6b 4e c7 53 7b 7d a0 da db de 79 7c 18 ee 01 10 cb 19 1f 71 f6 15 2d 83 82 32 7b 57 3f a3 df c5 f7 66 b3 69 99 48 d9 2b 4b b5 63 f5 05 71 87 07 23 af 4c 54 ad 33 b4 80 82 14 a9 c6 54 f6 f4 c5 72 4e 9d dd 9a 3d 4a 55 ae 94 a2 cb cd 77 39 87 cb 49 c2 ae ee 21 07 ee 9f 5f e7 4c 8d d4 f5 62 0f 6c 8e 95 59 24 27 8c 2e 7d 8f 4f 6a 7a b1 db 8c 67 d3 06 97 Data Ascii: N4?'N48I8Ty9&y'W qi;)8/QU{}SA#4=^Y;N?h[rWrc(wR2w@kNS{}y\|q-2{W?fiH+Kcq#LT3TrN=JUw9I!_LblY$'.}Ojzg
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 3e fd f1 9a b1 64 f2 37 fa 2c 51 c3 24 80 33 b2 ca 46 1b 6f 27 6f e0 0f 1e a2 bc e7 4f bd 78 64 66 cb 2e e1 ca 81 d7 df 15 a1 a7 df 31 b8 59 14 6e da 49 08 7d ba f1 5c b2 c3 db 63 d4 a5 8f 52 4b 9b 73 b2 d5 ae bc 39 75 14 8d 05 93 42 1a d0 ed 66 94 c8 c9 2f 50 41 e3 2b d4 60 f2 01 ac fb 5b 6b db 8d 3c dd 26 d5 86 d0 6c 12 32 ed 05 82 ee d9 93 d4 91 9f 97 af 3c 55 5d 36 f2 49 e1 9e dd 15 7c bb 93 95 cf 18 65 e7 83 db 3d c5 5f 5f 36 5d 1e 6b 3b 8b 63 79 b5 a3 9c b3 47 26 e8 95 0e 58 32 af 3c 83 b7 76 32 3b 1a ce ce 3a 1d 3c ca a3 bf 42 b6 ad 1e a1 6d a7 24 f7 71 79 31 cc a1 ed c6 7f d6 21 e4 30 1d 40 fa d6 35 be b3 7f 60 ce b1 3a 95 98 8e aa 32 84 36 e0 41 ec 41 c7 35 d5 78 b3 46 7b 5b f3 aa 68 d6 72 7f 64 cb 68 97 56 c9 15 d8 bb 6b 78 64 52 c1 24 61 cb 15 Data Ascii: >d7,Q$3Fo'oOxdf.1YnI}\cRKs9uBf/PA+`[k<&l2<U]6I\|e=__6]k;cyG&X2<v2;:<Bm$qy1!0@5`:26AA5xF{[hrdhVkxdR$a
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 39 c1 c5 67 fd a1 0e c6 8f 26 9a 7b e8 7c f5 06 89 ac c9 f7 6c 25 e9 dc 62 ad 47 e1 8d 70 ae e1 68 70 0f 27 3c 57 ad 5f 58 4d 0b 1f b1 88 49 ed fb b6 ce 2b 17 52 ff 00 84 90 2b f9 69 12 a9 1c 70 46 7f 03 5a ac 4c a5 b2 39 6a 61 29 53 f8 ae fd 11 c0 b7 87 35 64 5f 9e 20 33 d8 8e 95 4a e3 4a bb 85 b1 20 50 7f de ae 96 fd 35 49 9b f7 d7 41 8e 7a 16 db 54 65 d3 e7 3f eb 6e 20 ce 3a 19 07 35 b4 67 27 b9 e5 d5 ab 08 e9 08 b5 ea 73 ff 00 66 94 75 23 f3 a1 23 71 d7 1d 2b 6d 74 b6 66 da 2e 2d f2 0f f7 ea ec 1e 19 9e 5e 52 f2 d4 e3 b0 6e 69 b9 a5 b9 9c 25 39 ec 8e 6d 43 1e ff 00 fd 6a 70 cf 7a ea 63 f0 6e a3 23 12 b2 46 4e 7d 2a cf fc 2b ed 6c c7 c2 c3 db 19 6e 45 4f b5 82 dd 9a 47 0f 5a 5b 41 9c 7e 58 0c 7a 8e 6a 48 49 18 27 3c 9e 3d 6b 72 f3 c1 fa dd ab 6d 9a cc Data Ascii: 9g&{\|l%bGphp'<W_XMI+R+ipFZL9ja)S5d_ 3JJ P5IAzTe?n :5g'sfu##q+mtf.-^Rni%9mCjpzcn#FN}*+lnEOGZ[A~XzjHI'<=krm
2024-11-25 15:32:20 UTC	16067	IN	Data Raw: d7 27 ad 22 e0 fa ff 00 8d 4a ab 8f f1 a2 c4 68 ba 04 25 fa 1f 5e 99 a9 55 4e 71 ef d6 8c fa 8a 91 73 c7 f3 aa e5 32 94 89 23 46 ef 4f 08 41 cf a5 24 67 8e b5 32 10 7d fd 79 aa e5 b9 cf 26 c6 8f f6 aa 58 d1 18 7b 77 a6 4a a0 2f cb 50 ab e3 ff 00 af 48 8b 73 2d 0b 2c 89 51 c8 12 a2 69 18 f3 9e dd a9 ac ec 78 c8 a0 a8 c1 f7 1d 26 3f c6 99 f2 fa fd 29 a5 bb e6 93 39 ef f5 a4 68 a2 4c a5 47 4a 96 39 54 75 03 8a a5 bb d6 9d bb df f3 a7 70 74 ee 68 2d c4 67 f8 4d 45 74 14 f4 aa 9b f9 ea 7e 86 a4 8e 5c e0 13 9e 68 bd c8 f6 5c ae e8 8e 45 f4 fd 69 aa d8 6f eb 53 c8 99 e7 da a2 65 3d 39 fa 54 9a c6 57 43 6e 17 72 e7 f3 ac 99 cb 09 3d 3f 0a d8 cf cb 86 f4 ac fd 46 03 f7 d7 a6 79 ac aa 2e a7 45 09 24 ec ca e2 5e 29 92 c9 ff 00 ea cd 44 49 1f fd 7a 8d ce 2b 2b 9d b1 Data Ascii: '"Jh%^UNqs2#FOA$g2}y&X{wJ/PHs-,Qix&?)9hLGJ9Tupth-gMEt~\h\EioSe=9TWCnr=?Fy.E$^)DIz++
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 9e fc 62 8d 0c a3 cc b7 1f b2 36 5c 01 cf 73 50 48 bb 5b 1d bd ea 78 1b ff 00 ac 68 99 00 e7 b9 ea 4d 26 54 65 67 62 1c 9c 75 a7 c6 bd 32 7f 0a 58 b1 9e 7f 2f 4a 79 2b db 1f 5c 50 12 7d 05 18 dd ef 9a 7e 47 a5 45 c7 6f d4 53 b3 8e fd fa 50 66 d0 e6 3c d1 9c d3 73 f2 f4 fd 69 0b 7b f6 a1 05 89 a3 27 1c d2 9f 6a ac b3 32 b7 4e 33 d6 ac a3 06 f9 86 29 ee 4c a2 d0 ee 47 e5 c5 23 1a 18 ff 00 9f 5a 89 db 2d 81 4c 94 ae 49 f8 d3 d5 b8 e0 54 5d 06 3f 4a 50 78 c0 3f 4a 01 a2 55 3c f3 43 39 5e 07 ff 00 aa 98 0f 3d e9 25 3e 94 74 27 97 51 db fe b4 07 15 0e e2 5b 83 f8 51 b8 8a 2e 5f 29 63 78 1f d4 52 ab 1e e6 a0 8d 87 7f ca 9e ad 93 f4 a0 87 12 ca 3f 1d 69 e8 e0 8c 55 65 39 f5 fc 2a 58 71 ff 00 d6 cd 3b 99 4a 25 fb 71 9e 4f a5 36 f3 09 ce 6a 0f b4 6c 5e 4e 17 35 8d Data Ascii: b6\sPH[xhM&Tegbu2X/Jy+\P}~GEoSPf<si{'j2N3)LG#Z-LIT]?JPx?JU<C9^=%>t'Q[Q._)cxR?iUe9*Xq;J%qO6jl^N5
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 49 12 c6 c0 74 34 8d 72 c1 b0 33 f5 aa ec 4f f8 52 0c 9e 4d 17 64 7b 35 d4 b0 d7 6f 9e fd 29 63 b9 90 36 46 6a be d3 9e 95 22 ad 3b b0 71 8d b6 2d 2d db f7 fd 29 eb 73 9f bd eb de a9 b3 84 5f f0 a8 b7 3b 75 3f 95 17 23 d8 c5 f4 35 d6 74 3d 0d 48 bb 4a f0 df 95 63 23 9e 99 ab 30 4b 8c 53 32 9d 1b 6c 6a 46 01 e3 35 32 ae 3d 3f 2a a3 6f 70 15 b9 3f ad 5d 8e 45 7e 84 53 38 ea 46 48 76 00 ed 4c 90 0c ff 00 f5 ba d3 db db f5 a6 48 41 e2 99 11 23 62 3a 63 e9 4d da 07 5f e5 4b 8e f4 8d c7 f8 54 9a 0e c0 ed 48 dc d0 33 8a 46 fb dd 2a 80 76 28 e9 48 c7 0b 91 49 b8 15 a0 07 e7 3d a9 57 1d 69 9b bd e9 3c ca 02 c4 c9 4c 90 0c fb 52 06 cf 7f ad 24 92 05 1c ff 00 3a 62 49 dc 1a a3 c7 7a 82 ea ed 57 81 cf 3e b5 5d ef 19 ba 52 d0 de 34 66 cb ac 17 8f 43 51 49 8c f2 47 5a Data Ascii: It4r3ORMd{5o)c6Fj";q--)s_;u?#5t=HJc#0KS2ljF52=?op?]E~S8FHvLHA#b:cM_KTH3Fv(HI=Wi<LR$:bIzW>]R4fCQIGZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49796	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:19 UTC	375	OUT	GET /th?id=OADD2.10239360265013_1UVY69FM05I7V26BP&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-11-25 15:32:20 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 193575 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D517C998A8524FA0AAD718A29C613683 Ref B: EWR311000102029 Ref C: 2024-11-25T15:32:20Z Date: Mon, 25 Nov 2024 15:32:19 GMT Connection: close
2024-11-25 15:32:20 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 31 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 32 3a 31 30 20 32 32 3a 34 31 3a 32 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.1 (Windows)2023:02:10 22:41:278C
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: c6 e2 8c 0a 76 38 a3 04 50 17 1b 45 3b 14 62 80 1b 4b 8a 5d b8 eb 46 3d a8 01 08 a4 a7 0f 4c 53 b8 c7 20 74 ed 40 11 8f 4a 5c 0a 50 32 38 a5 c6 3a fe 94 00 dc 73 46 29 d8 a3 1f e4 d2 b8 0d ff 00 3d 28 c5 3b 19 ed 8a 7b 02 c8 09 23 01 78 fc e9 5c 71 57 b9 17 e1 46 29 c0 13 f2 fa d3 ca 61 58 63 2c 08 ef 47 30 d4 6e 45 ef 4a d8 1c 0f 4a 72 8c 30 e7 f3 ed 4e e5 db e6 e7 de 80 8e c4 63 1d c9 a7 71 b8 1f e7 4e 65 1e 5a 90 3a 8e 4d 0b 1b 1e 48 fc 48 ff 00 3f e4 d2 b9 4b 9a f6 18 08 e7 d3 b0 a0 f2 76 f6 07 a9 ef 4f 50 51 83 63 9c f0 08 a1 be 76 3b 57 19 3d 05 21 f4 df 51 aa 00 6e 84 7a 64 51 95 0e 30 28 fe 1e 9d fb d2 b2 9c 03 8e 48 f4 a6 1c ce da 08 48 da 38 ff 00 f5 53 54 70 4e 3f fa d4 f5 55 2b cb 10 d9 e8 69 24 4c 3e 38 1e f4 84 ef b8 dc 7c d9 e4 f3 d0 8a 72 Data Ascii: v8PE;bK]F=LS t@J\P28:sF)=(;{#x\qWF)aXc,G0nEJJr0NcqNeZ:MHH?KvOPQcv;W=!QnzdQ0(HH8STpN?U+i$L>8\|r
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 0e 49 b7 b1 06 cc 1e 7a 7a d2 b2 28 f5 3f c8 d3 dc 0d db b2 06 7a e0 74 a4 65 3b bf a0 aa 13 69 26 1b 46 c0 d9 c3 67 bf 71 4c 02 a4 f9 8e 06 4f 1e 94 f5 81 cf f0 e3 fa 51 7b 09 de 6f dd 44 18 fa fb 8a 5d b9 38 a9 84 4c cc 48 19 e3 34 9e 59 e3 f9 01 47 30 9c 64 86 2a 65 80 f5 f5 34 6c ee 07 7f 5a 93 0d f7 b3 f4 a7 20 18 e3 ae 7a 91 fe 7f c9 a2 e3 b2 20 db cf 51 d7 ad 2e c3 db 1c 9e 6a 63 19 03 85 fc 68 54 e3 85 23 9e 79 eb 47 31 3c ba 91 e1 78 e3 b7 34 9b 48 3d 07 3d aa 6f 28 f6 04 e7 da 9c b1 11 20 dc 7a fb 51 cc 57 24 99 02 28 ff 00 f5 d3 c2 0f ee 9e 3a fb d5 8b 68 77 65 b1 85 07 27 14 e1 09 2c 14 05 dd e9 9e 95 2e 6a e5 c6 8c 9a 4e c5 5c 60 9e f9 f6 a3 67 ee f3 57 7c 9c 72 01 5e 38 24 f2 7f 2f ad 33 c9 26 3e a0 fa 02 28 e7 43 95 09 2d ca ed 19 e9 cf 03 Data Ascii: Izz(?zte;i&FgqLOQ{oD]8LH4YG0d*e4lZ z Q.jchT#yG1<x4H==o( zQW$(:hwe',.jN\`gW\|r^8$/3&>(C-
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 5c dd a7 8c ae 1b 52 93 4c 31 45 1d f5 b0 cc b6 93 c6 cb 28 1e a0 1e aa 7f bc 32 2b b9 d6 9f 62 6f 2c 3e 53 82 01 eb 5c 87 c4 1d 0b 47 f1 4d a4 22 e6 46 8e ee d5 b3 6b 73 03 6d 9a 03 ea a7 d3 d5 7a 1a ea a1 38 bd 2a 2d 3b 9c 58 8a 32 4a f4 9d 9f 6f eb 63 a6 d1 75 ad 32 5b 15 be 7b a8 ad 63 07 12 99 e4 0a 23 6f 42 c7 8f a5 72 bf 12 9a c9 b4 b8 65 49 ad 6f e0 b8 b8 22 3b a8 9d 5f 18 1d 37 8e 41 c9 af 21 f8 9e fa 95 86 a9 15 9d de a6 ba 84 2c 0b 23 6c 2b c8 e0 87 5e 99 e7 3c 71 cd 73 30 cc d0 b7 9d 19 31 3e 77 66 3f 97 27 d7 1d 33 5e a5 0c b9 69 51 48 f1 f1 19 9c 9a 74 65 0d 4f 40 bc 36 b6 db 7e 71 f3 8c 00 47 e9 5c ae b5 75 f6 89 1d f7 60 06 3b 53 38 04 0e 01 3e e7 15 97 7d af dc 9d a5 a5 ce df e2 db 9c 1f 5a c9 d4 35 37 91 b7 36 7a f3 db 35 ea 53 c3 c9 6e Data Ascii: \RL1E(2+bo,>S\GM"Fksmz8*-;X2Jocu2[{c#oBreIo";_7A!,#l+^<qs01>wf?'3^iQHteO@6~qG\u`;S8>}Z576z5Sn
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 82 57 73 b8 7c a0 ab 12 0e 30 08 23 e8 79 15 e8 be 05 b9 b5 8b cb 8a 67 1f 68 61 b5 56 33 ca 63 a9 fd 38 fa d7 37 e1 bb d9 96 de e0 12 bb e4 46 0b 1b 20 21 72 bb 5f af 73 81 f8 8a e8 bc 27 a5 29 d9 7b 0a 13 71 00 0e f1 b8 eb 9e 54 fe 40 fe 20 d7 16 26 6e 49 f3 1e 86 16 0a 2d 72 a3 d4 e3 86 3d 5b 49 45 ba 86 de 6b 88 01 31 3c b1 07 0a 48 c6 79 f5 00 03 5e 17 fb 4a 44 bf f0 99 68 4b 25 93 23 db e9 c5 24 72 d8 12 a8 93 20 0c 0e 8b c8 07 df 1d ab db 7c 2f 3b c9 a6 ac 8e 15 77 1e 36 8c 74 eb 9a f0 7f da 12 f2 6b af 8b 5a 84 32 4e d2 43 61 14 30 40 99 e2 21 b0 33 81 f5 66 24 d7 1e 5a 9a c4 7a 27 fe 5f a9 d5 9b 4a 3f 54 d7 76 d7 f9 fe 87 35 e2 2d 3b 4a 59 be d5 a5 cb 7c 15 4a f9 6b 74 8b b9 d7 1f 33 12 bc 0c 12 70 3d 3b e6 96 de 22 fb 49 3d b9 c7 7a a5 0c 8c 78 Data Ascii: Ws\|0#yghaV3c87F !r_s'){qT@ &nI-r=[IEk1<Hy^JDhK%#$r \|/;w6tkZ2NCa0@!3f$Zz'_J?Tv5-;JY\|Jkt3p=;"I=zx
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 39 07 e9 5a 51 c2 62 6a a4 e1 06 d7 7e 86 35 f1 58 5a 0d c6 a5 44 9f 6e a7 a2 88 ff 00 9d 39 60 76 e8 8c 7d ab c2 b5 8f 8a 9e 34 b9 62 63 d6 ad 2c f7 7d d8 ec 74 f0 9f ab 12 78 ac ab cf 1e 78 a6 49 ff 00 7f e2 7b e5 f2 d8 06 52 76 8c 81 df 1f 5e 95 e8 43 25 c4 b5 ab 4b ef ff 00 23 cb 9e 7d 85 8b b2 8b fc 3f cc fa 33 ec 92 9e 91 3f 4f ee 9a 46 b4 94 0e 62 7f fb e6 be 6c bf d7 b5 99 d8 bc de 23 d4 a3 5d db 54 89 59 73 9e 9b b0 78 ce 46 3e b5 76 18 7c 48 4e fb 3b fd 52 ed cc 42 46 36 ad 2c a8 17 38 c1 eb df af b8 aa 79 3c e2 bd ea 89 7c 98 47 3a 84 db 51 a4 df cd 1f 41 fd 96 53 ff 00 2c db 9f 6e b4 7d 9a 5c f3 1b 7f df 26 bc 22 d6 5f 12 5c dd 47 04 69 ac d9 dc 30 19 4d d2 e0 95 1b 9b 1b 87 a0 24 af bd 43 aa 5f 7c 42 d0 bf e3 fe 5d 72 cd 30 ad fb dd cc ab e6 Data Ascii: 9ZQbj~5XZDn9`v}4bc,}txxI{Rv^C%K#}?3?OFbl#]TYsxF>v\|HN;RBF6,8y<\|G:QAS,n}\&"_\Gi0M$C_\|B]r0
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: 5f 08 ee a2 95 7c ef 95 a3 24 86 cf 71 5b 60 e1 29 55 6a 6f a2 31 cc b1 11 85 05 2a 49 3b bb 7e 1d 8a 0b a5 ad c4 ed 81 27 ca a0 92 5b a5 57 4d 12 37 8e 42 77 0c 30 e7 3d 6b 6f 43 bf d3 52 4b c3 3d c9 42 b1 0d a0 a9 fd e1 e3 20 52 5b df e9 63 4a 99 5e 69 04 de 67 c8 08 e3 a7 f8 d7 a3 ca 93 d8 f1 14 e4 e2 9b 6a fa 9c d4 da 1a 19 17 08 df 77 9c d4 f6 be 1e 8d f7 82 85 b1 1f 1c f4 c9 e2 b4 a6 d4 b4 e4 65 2b 3b fc b6 fb 7b 7d ff 00 f0 eb 4c 87 c4 56 50 c7 2e fb 73 2b 48 8a a0 ee c6 31 56 e9 c6 da 23 38 54 ab cd ab 31 66 f0 ec 68 ec 85 39 52 72 45 43 26 85 6c 17 ee 9f f2 2a dc da d9 de c6 38 8f cc 08 e4 d5 2b 8d 52 ea 5e 44 6a bc f4 02 ab d9 d3 ea 8b 8b c5 3e b6 18 ba 15 91 6c b7 cb eb 5b 7a 2f 82 b4 bb 95 df 25 ec 2a 31 cf 38 c7 e7 5c dc 97 77 ef d1 c8 fc 2a Data Ascii: _\|$q[`)Ujo1I;~'[WM7Bw0=koCRK=B R[cJ^igjwe+;{}LVP.s+H1V#8T1fh9RrEC&l8+R^Dj>l[z/%18\w
2024-11-25 15:32:20 UTC	16069	IN	Data Raw: 26 97 2b d3 bd 67 ea 83 fd 1c 91 53 ab 6e 7d 8c d9 da 76 e6 a9 ea d2 88 44 83 39 db c0 e6 b3 6c ed a3 0b 4d 24 71 fe 20 55 43 bb 62 f3 de b0 a7 c6 72 3f 2a d2 d6 ae 9a e2 e1 8f 00 76 15 9d 2f dd c8 1c 57 9b 51 dd 9f 6b 85 8c a3 05 72 09 00 1f fd 6a 8f 38 e9 d0 f6 a9 59 54 ae 6a 3f 97 38 23 e8 0d 62 77 44 8f 27 df af 7a 6c c4 fe b5 24 cb 50 b0 fa fe 34 8d 23 66 35 9b 6f 1d e9 18 9f 4f ca 8d a3 77 34 30 1f 95 49 a6 83 37 1e 98 eb 48 47 19 fc e9 cc d8 5c 81 48 a7 8c fe 74 5c a1 15 b2 7b 52 3a 8e d9 a0 e3 d7 bd 36 53 db 26 91 4b 71 3a f1 41 04 2f 34 d5 e3 9a 56 24 f5 a0 a0 61 f2 53 17 1d 69 58 d0 bd 30 29 14 47 22 8c f1 eb cd 34 ee 0b 4f 6f 7a 36 e7 a9 a9 2d 32 2c e3 ae 73 9a 18 77 02 9e e3 9f e9 49 b4 b5 22 ae 33 9f f1 cf 7a 45 18 e3 f9 d2 af 1d 73 48 c7 8e Data Ascii: &+gSn}vD9lM$q UCbr?*v/WQkrj8YTj?8#bwD'zl$P4#f5oOw40I7HG\Ht\{R:6S&Kq:A/4V$aSiX0)G"4Ooz6-2,swI"3zEsH
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: c6 0e 40 a9 98 7a 53 73 b2 4d dd 7d a8 b1 69 90 bf 34 da 96 4c bb 93 8c 64 f6 ed 4c 08 7a 54 9a 26 33 04 2d 35 87 cd ff 00 d7 a7 e0 83 83 4d 62 07 07 19 f7 a5 62 90 dc 63 9a 6b 0c 8e 69 e7 1f a7 5c d3 0f bd 22 90 c2 30 68 cf 71 41 14 1e 29 33 41 32 69 72 31 d2 93 8c f5 a4 c6 7a 52 01 24 00 f2 29 8b 9c f6 fa d3 d8 7a 50 a3 3d 45 05 74 1a e7 e5 fe 46 99 93 fe 27 d6 a4 70 3b 53 70 07 a5 4b 29 11 90 49 fa 52 a8 c8 eb 4f e0 8f f0 a6 b1 c1 a0 ab 8d 61 ed 40 14 13 fe 71 4b 90 3f ad 00 35 86 1b 14 de f4 ec f3 9a 43 cd 05 02 8a 69 e0 f5 a5 f5 e6 92 80 17 3e a4 50 4e 69 0f 1c 62 85 39 a0 61 f5 a6 b9 f4 a9 08 ff 00 eb d3 1b 83 fd 28 1a 13 3f ad 1d 07 f8 52 8f bb cd 37 fc 6a 46 1d 7a d2 f5 a4 c5 0c 28 18 83 14 66 8a 3e b5 20 14 50 68 a0 02 8a 09 a2 80 0c d0 c7 14 35 Data Ascii: @zSsM}i4LdLzT&3-5Mbbcki\"0hqA)3A2ir1zR$)zP=EtF'p;SpK)IROa@qK?5Ci>PNib9a(?R7jFz(f> Ph5
2024-11-25 15:32:20 UTC	16384	IN	Data Raw: c8 43 55 45 90 7a d4 a8 d8 5c f1 4c 25 02 7b 87 e9 83 f8 7a 54 0e df 2f 35 1b 39 dd cd 11 93 fc 5c d2 29 42 c8 a7 a9 45 b9 33 ed da b1 1a 33 1c dc 0e f5 d4 4e a1 a3 e9 59 97 16 9b a4 e2 b3 94 4e ec 35 7b 2b 32 bd bf 23 18 ed 53 88 37 74 15 2d bd b6 ce b5 32 e1 5b 8e f4 24 13 a9 ae 85 17 b4 c9 cd 4b 6b 03 21 c6 2a e7 14 01 cf 5a 7c a8 87 5a 4d 58 58 81 c7 15 28 52 69 17 a7 f5 a7 a6 33 c5 59 cd 26 28 84 e7 f9 d3 f6 6d 18 02 a5 8d f0 b8 01 73 ef 44 7b 9e 4d b8 fa 91 da 99 8f 33 2e 69 b6 8b 35 bc 8c 59 15 a3 5d c0 31 c6 7d 85 67 ea 8e 0f ca 3e ef 6a bf 70 23 58 55 63 66 56 c7 24 f7 fa 56 55 c6 4b 10 69 ec 4d 1d 65 73 35 e2 c6 46 0f 5a 81 93 3d aa fc 8a 7a 53 1a 21 b7 24 fe 15 0d 1e 94 6a 19 72 db 6f 3b 94 61 87 4e 2a 4b 70 7f d5 c9 c3 7a fa d6 84 71 29 ec 3d Data Ascii: CUEz\L%{zT/59\)BE33NYN5{+2#S7t-2[$Kk!Z\|ZMXX(Ri3Y&(msD{M3.i5Y]1}g>jp#XUcfV$VUKiMes5FZ=zS!$jro;aNKpzq)=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49797	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:20 UTC	794	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8eoM1ZBIrw5KepusKyHuQHTVUCUz-fHYR9M961VgdGPR24O80pXgwkqe8VdaeV69Xo9HVGrIeVjh7pd6Apj9DtZLv-dRyFLrDAbYwDvyItE1Foz8fGeDSnVvH9FtAgh6_BrsVjZFXD7aR7CFTKflLnlCYRQBikVW_i9FtrXYjuM9Mx29J%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZmZyZWUtb2ZmaWNlLW9ubGluZS1mb3ItdGhlLXdlYiUzZm9jaWQlM2RjbW01enF4NmxxMA%26rlid%3De072a8c7ed2610df4965cf83755ee7ea&TIME=20241125T153216Z&CID=531098720&EID=531098720&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive
2024-11-25 15:32:21 UTC	862	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=01E3A718127C6A1A1B89B25A13556BA1; domain=.bing.com; expires=Sat, 20-Dec-2025 15:32:20 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=g.bing.com; expires=Mon, 02-Dec-2024 15:32:20 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 0DD5CA68CDCE49DAA5688EB8D3DB82E9 Ref B: EWR30EDGE0206 Ref C: 2024-11-25T15:32:20Z Date: Mon, 25 Nov 2024 15:32:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:21 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:21 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c2388785-401e-0048-0e03-3e0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153221Z-178bfbc474bbcwv4hC1NYCypys00000007hg000000008sbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:21 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:21 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 043e45ca-501e-0078-1031-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153221Z-178bfbc474b9fdhphC1NYCac0n00000007pg000000002st7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:21 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:21 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 33a5509c-101e-00a2-2819-3d9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153221Z-178bfbc474bnwsh4hC1NYC2ubs00000007r000000000e8gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49803	13.107.246.63	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:21 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:21 UTC	818	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:21 GMT Content-Type: application/x-javascript Content-Length: 49911 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: e6cfe59e-201e-0021-47ce-3de72d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241125T153221Z-174c587ffdfgcs66hC1TEB69cs00000005yg00000000kadq x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 15:32:21 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2024-11-25 15:32:21 UTC	16384	IN	Data Raw: dc e8 04 0c 90 4b a3 63 26 8e dc 27 90 75 ea 00 00 66 d9 23 bc bb 0c 77 90 36 70 02 a2 23 27 68 d7 13 77 83 5b ce 75 c8 5d 1e 38 7e d8 ef 65 93 b7 51 ba 99 a3 99 6e c4 c1 49 25 dd 80 44 6f 6d d6 5b f8 24 0d de 5f 42 cf db 25 c7 07 20 5b 70 93 25 fa 4a f2 b1 09 72 79 ab 24 b3 29 e5 95 16 1b 3c 9b e3 f6 1e bc 63 2b a7 73 9c 09 3c 7b 87 34 0e 7c c0 b3 7e cf c4 83 50 e7 60 ac d8 21 42 fd 4d eb 90 1b 4e 38 90 99 77 8e e0 d0 a6 2f bd 49 a2 b4 57 da 5c 87 87 25 cd 61 58 8e c4 2d 4e ad 5b 1a 28 47 10 3f 31 5a 3e 44 bc 65 2b c5 c3 87 fc 45 47 b6 f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 16 60 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f 0c ce 10 Data Ascii: Kc&'uf#w6p#'hw[u]8~eQnI%Dom[$_B% [p%Jry$)<c+s<{4\|~P`!BMN8w/IW\%aX-N[(G?1Z>De+EG{wRws8X{.*}u<iT@0TS2}`JC.?
2024-11-25 15:32:21 UTC	16384	IN	Data Raw: 85 03 84 98 5c 85 38 d6 6a dc 7a 5a 70 a3 3c ed 56 cf 7a 78 2f 6c 5a 04 6d 94 02 7c 5f 33 90 18 0e f6 15 fb 9f fd c2 2d 7c f6 09 99 56 e0 1b df 55 00 e9 61 19 a9 ae 08 b4 08 de 5e 5e 8b 45 87 04 e9 6b b8 4e 14 17 ac 44 38 17 c4 11 e4 15 f5 05 82 e4 5a e1 00 e1 b1 7a c3 5a 2a cb eb 40 53 54 ab c1 7c ad ba a5 5c a6 6e 38 df 2e 84 c6 0f 51 3b 3d 74 de 84 36 7f d1 36 c8 68 2e a7 19 09 6f b4 0d 8a 69 11 fc 25 99 f6 55 32 25 02 a3 cd f2 e5 b9 1f 5a 92 03 c5 6a 6e d0 c6 ff b1 0d 05 a2 16 7e 06 11 d8 2f e6 d8 0b d6 12 91 54 cd 2a 90 95 47 9c 89 ce 07 af 7b 17 a7 3f 3f c1 8f fe 53 46 e8 38 88 e1 92 f5 d4 34 4b ca ff d8 a1 26 dd bc d2 22 ad b5 44 6f f6 c3 ab 20 de c6 32 0d 70 78 26 6a f3 08 a8 73 81 d6 01 20 73 48 80 a3 ea 25 4e 2a 1f eb b1 f6 d7 5d 21 e3 43 50 cc Data Ascii: \8jzZp<Vzx/lZm\|_3-\|VUa^^EkND8ZzZ@ST\|\n8.Q;=t66h.oi%U2%Zjn~/TG{??SF84K&"Do 2px&js sH%N*]!CP
2024-11-25 15:32:21 UTC	1577	IN	Data Raw: 68 f7 d1 fe 37 7f de ff ee 4f df 7f f3 75 73 04 27 dd e4 22 f3 c8 f9 f6 eb 34 7d f4 dd 37 c9 ee f7 8f f6 e2 dd 6f 66 df 7e bf fb 7d f2 f5 de 6e fc a7 bd af f7 bf 9d 3d fa d3 77 5f ff c9 21 56 2a a5 73 b5 26 36 2a 27 82 5f 12 0b 55 10 07 45 ac c1 2c da 23 56 89 cf dd 43 f9 73 20 7f 9e 75 9c 76 3f 1a ef 92 4a 90 bf 91 22 52 db 77 24 13 55 ce a9 1a 01 89 98 e7 e9 12 09 35 70 a9 69 d1 8b 04 3e 39 b8 03 34 3d 1a 1b f6 0d 11 dc b4 09 a7 5a e3 8c 8b a0 d8 8e 04 67 bc 91 4c 62 e2 2d 07 7e 93 24 60 c7 c4 68 e0 da 03 1d 6c 3c 21 5c 7a 3a 4f b3 ab 34 19 29 dd 15 7b 6b c9 37 46 ce 38 f3 54 8a b9 ab e3 f2 64 a2 b4 95 f8 ed 6f a1 2d 95 5b 98 f6 b3 12 95 75 5d 1b eb 28 7f d3 8a 79 02 81 cc da 41 13 ca b3 45 0d 0a 89 e2 cd 78 84 e3 f1 cc c7 60 84 29 31 ff 70 62 90 50 0e Data Ascii: h7Ous'"4}7of~}n=w_!Vs&6'_UE,#VCs uv?J"Rw$U5pi>94=ZgLb-~$`hl<!\z:O4){k7F8Tdo-[u](yAEx`)1pbP

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:21 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0a6aa823-c01e-0014-3efe-3da6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153221Z-178bfbc474bpnd5vhC1NYC4vr400000007h000000000r7z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:21 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153221Z-15b8b599d88s6mj9hC1TEBur3000000005wg00000000hu53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:22 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49806	2.16.158.96	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:22 UTC	444	OUT	GET /aes/c.gif?RG=cd0f16605eb242e0a739087450c44e19&med=10&pubId=251978541&tids=15000&type=mv&reqver=1.0&TIME=20241125T153217Z&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: www.bing.com Connection: Keep-Alive Cookie: MUID=01E3A718127C6A1A1B89B25A13556BA1
2024-11-25 15:32:24 UTC	779	IN	HTTP/1.1 200 OK Cache-Control: private,no-store Pragma: no-cache Vary: Origin P3P: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 13F1F89CDBDA4F7BA5DB9C7BF65D0C86 Ref B: DXB251051109060 Ref C: 2024-11-25T15:32:23Z Content-Length: 0 Date: Mon, 25 Nov 2024 15:32:23 GMT Connection: close Set-Cookie: _EDGE_S=SID=330872B186BD62A407D667F387B463BF; path=/; httponly; domain=bing.com Set-Cookie: MUIDB=01E3A718127C6A1A1B89B25A13556BA1; path=/; httponly; expires=Sat, 20-Dec-2025 15:32:23 GMT Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.1c9e1002.1732548743.1811f824

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153223Z-174c587ffdfn4nhwhC1TEB2nbc0000000690000000003ryw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 974535d3-001e-002b-30bf-3e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153224Z-178bfbc474bv587zhC1NYCny5w00000007fg00000000hm6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 97f3364e-001e-00a2-6ca6-3ed4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153224Z-178bfbc474bv7whqhC1NYC1fg400000007k000000000r626 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 89d933d2-101e-0028-046e-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153224Z-174c587ffdfb5q56hC1TEB04kg000000061000000000ftee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 8a9c0054-c01e-0046-231b-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153224Z-178bfbc474bq2pr7hC1NYCkfgg00000007qg00000000p04q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49814	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:25 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5187812 Cache-Control: public, max-age=31536000 Content-MD5: 8N6amNvfqMAnQs5tkvslJA== Content-Type: text/css Date: Mon, 25 Nov 2024 15:32:24 GMT Etag: 0x8DCDDAB171F8006 Last-Modified: Wed, 25 Sep 2024 21:43:27 GMT Server: ECAcc (lhc/78AC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 541c8d22-201e-00d2-0520-100289000000 x-ms-version: 2009-09-19 Content-Length: 113378 Connection: close
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 Data Ascii: flow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.ta
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e Data Ascii: UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mon
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 3b 74 65 78 74 2d 64 65 Data Ascii: mary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-color:#005da6;text-de
2024-11-25 15:32:25 UTC	15080	IN	Data Raw: 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a Data Ascii: rgin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49815	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:25 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2407169 Cache-Control: public, max-age=31536000 Content-MD5: ABUpLq9YtGgLSjA/fBU6NQ== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:24 GMT Etag: 0x8DCF399B77640D7 Last-Modified: Wed, 23 Oct 2024 19:34:31 GMT Server: ECAcc (lhc/7889) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bff7b86e-a01e-0091-1a6a-29e4d5000000 x-ms-version: 2009-09-19 Content-Length: 449972 Connection: close
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-25 15:32:25 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: ocument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventList
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d Data Ascii: PropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d Data Ascii: ar n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 3f 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d Data Ascii: ?g.clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnm
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 Data Ascii: e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificat
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d 69 2e 41 72 72 61 79 2c 72 3d 7b 6d 65 72 67 65 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 Data Ascii: idation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=i.Array,r={mergeSessions:function(e,n,t){var i=[];return
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 72 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 74 68 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2b 22 69 6d 61 67 65 73 2f 22 3b 76 61 72 20 61 3d 74 28 32 29 2c 6f 3d 74 28 37 30 29 2c 72 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 63 3d 74 28 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 67 3d 73 2e 43 6f 6f 6b 69 65 73 2c 6d 3d 64 2e 4c 6f 67 69 6e 4f 70 74 69 6f 6e 2c 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 21 66 75 6e 63 74 69 6f Data Ascii: rlCdn,i.ServerData.urlImagePath=i.ServerData.urlCdn+"images/";var a=t(2),o=t(70),r=t(0),s=t(1),c=t(73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryString,g=s.Cookies,m=d.LoginOption,b=!1;function v(e){!functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49813	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:24 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:25 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2406931 Cache-Control: public, max-age=31536000 Content-MD5: GHueukH99mssj362RdK8Fw== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:24 GMT Etag: 0x8DCF55E8343790A Last-Modified: Sat, 26 Oct 2024 01:35:45 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 19e084fe-501e-0061-776b-29a224000000 x-ms-version: 2009-09-19 Content-Length: 57510 Connection: close
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-11-25 15:32:25 UTC	16383	IN	Data Raw: 65 20 77 61 73 20 61 6e 20 69 73 73 75 65 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 72 65 63 6f 76 65 72 79 20 6d 65 74 68 6f 64 73 2e 20 54 72 79 20 61 67 61 69 6e 2e 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e Data Ascii: e was an issue looking up your account recovery methods. Try again.",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with an
2024-11-25 15:32:25 UTC	8361	IN	Data Raw: 63 3a 22 39 30 31 30 31 33 22 2c 4e 6f 45 78 74 65 72 6e 61 6c 49 64 65 6e 74 69 66 69 65 72 43 6f 6c 6c 65 63 74 65 64 46 72 6f 6d 45 78 74 65 72 6e 61 6c 4f 69 64 63 49 44 50 3a 22 39 30 31 30 31 34 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 Data Ascii: c:"901013",NoExternalIdentifierCollectedFromExternalOidcIDP:"901014",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49818	150.171.28.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:25 UTC	884	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8eoM1ZBIrw5KepusKyHuQHTVUCUz-fHYR9M961VgdGPR24O80pXgwkqe8VdaeV69Xo9HVGrIeVjh7pd6Apj9DtZLv-dRyFLrDAbYwDvyItE1Foz8fGeDSnVvH9FtAgh6_BrsVjZFXD7aR7CFTKflLnlCYRQBikVW_i9FtrXYjuM9Mx29J%26u%3DbWljcm9zb2Z0LWVkZ2UlM2FodHRwcyUzYSUyZiUyZnd3dy5taWNyb3NvZnQuY29tJTJmbWljcm9zb2Z0LTM2NSUyZmZyZWUtb2ZmaWNlLW9ubGluZS1mb3ItdGhlLXdlYiUzZm9jaWQlM2RjbW01enF4NmxxMA%26rlid%3De072a8c7ed2610df4965cf83755ee7ea&TIME=20241125T153217Z&CID=531098720&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=DA18C8825356BAC4E7B23066FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive Cookie: MUID=01E3A718127C6A1A1B89B25A13556BA1; _EDGE_S=SID=330872B186BD62A407D667F387B463BF; MR=0
2024-11-25 15:32:26 UTC	763	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MSPTC=APxBWFvKZn5NGAkjVYmnsJylcyInoplpXDMMQFyvrdE; domain=.bing.com; expires=Sat, 20-Dec-2025 15:32:26 GMT; path=/; Partitioned; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8D27A6764A31409EA184A611BF4DBF5D Ref B: EWR30EDGE0106 Ref C: 2024-11-25T15:32:26Z Date: Mon, 25 Nov 2024 15:32:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:25 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a6b1c0e3-801e-002a-1ea2-3e31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153226Z-178bfbc474bpnd5vhC1NYC4vr400000007m000000000ka31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:26 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0aa534f7-c01e-0014-501a-3ea6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153226Z-178bfbc474bw8bwphC1NYC38b400000007hg00000000622m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:26 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77e83d57-401e-0016-5857-3c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153226Z-15b8b599d885ffrhhC1TEBtuv0000000062g00000000sq08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:26 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7fefabc9-101e-000b-0f11-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153226Z-178bfbc474bh5zbqhC1NYCkdug00000007eg00000000tfvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:26 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 732016c8-001e-000b-7fb8-3e15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153226Z-178bfbc474bv587zhC1NYCny5w00000007m00000000062hp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49824	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:27 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:28 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2406934 Cache-Control: public, max-age=31536000 Content-MD5: GHueukH99mssj362RdK8Fw== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:27 GMT Etag: 0x8DCF55E8343790A Last-Modified: Sat, 26 Oct 2024 01:35:45 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 19e084fe-501e-0061-776b-29a224000000 x-ms-version: 2009-09-19 Content-Length: 57510 Connection: close
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-25 15:32:28 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 20 77 61 73 20 61 6e 20 69 73 73 75 65 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 72 65 63 6f 76 65 72 79 20 6d 65 74 68 6f 64 73 2e 20 54 72 79 20 61 67 61 69 6e 2e 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f Data Ascii: was an issue looking up your account recovery methods. Try again.",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with ano
2024-11-25 15:32:28 UTC	8360	IN	Data Raw: 3a 22 39 30 31 30 31 33 22 2c 4e 6f 45 78 74 65 72 6e 61 6c 49 64 65 6e 74 69 66 69 65 72 43 6f 6c 6c 65 63 74 65 64 46 72 6f 6d 45 78 74 65 72 6e 61 6c 4f 69 64 63 49 44 50 3a 22 39 30 31 30 31 34 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a Data Ascii: :"901013",NoExternalIdentifierCollectedFromExternalOidcIDP:"901014",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49826	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:28 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21290026 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 25 Nov 2024 15:32:28 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-25 15:32:28 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49825	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:28 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2407173 Cache-Control: public, max-age=31536000 Content-MD5: ABUpLq9YtGgLSjA/fBU6NQ== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:28 GMT Etag: 0x8DCF399B77640D7 Last-Modified: Wed, 23 Oct 2024 19:34:31 GMT Server: ECAcc (lhc/7889) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bff7b86e-a01e-0091-1a6a-29e4d5000000 x-ms-version: 2009-09-19 Content-Length: 449972 Connection: close
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-25 15:32:28 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: ocument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventList
2024-11-25 15:32:28 UTC	2	IN	Data Raw: 50 72 Data Ascii: Pr
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c Data Ascii: opertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=n\|
2024-11-25 15:32:29 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d 6e 2c 74 Data Ascii: n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=n,t
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 6e 61 Data Ascii: clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnmana
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e Data Ascii: howForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificateIn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49827	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:28 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 508947 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:28 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cfa5d8ca-401e-00b6-4bae-3af311000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-25 15:32:28 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 21 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c Data Ascii: !1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rul
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 Data Ascii: d"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binar
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 Data Ascii: /g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 7d 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 Data Ascii: }var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 65 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b Data Ascii: e)}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s[
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 Data Ascii: .exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(537);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pr
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 Data Ascii: &&arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((f
2024-11-25 15:32:29 UTC	16383	IN	Data Raw: 29 7b 72 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 74 2c 6e 29 2c 72 2e 70 72 6f 63 65 73 73 65 64 3d 21 30 2c 65 28 74 29 7d 29 29 3a 74 68 69 73 2e 61 73 79 6e 63 54 69 63 6b 28 74 2c 65 29 7d 63 61 74 63 68 28 69 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 65 64 3d 21 30 2c 65 28 69 29 7d 7d 2c 6c 2e 61 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 63 65 73 73 65 64 3f 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 2e 65 72 72 6f 72 3f 72 28 74 2e 65 72 72 6f 72 29 3a 65 28 74 2e 73 74 72 69 6e 67 69 66 79 28 29 29 7d 29 29 3a 28 74 68 69 73 2e 70 72 6f 63 65 73 73 69 6e 67 7c 7c 28 74 68 69 73 2e 70 72 6f 63 65 73 73 69 6e 67 3d 6e 65 77 20 Data Ascii: ){r.handleError(t,n),r.processed=!0,e(t)})):this.asyncTick(t,e)}catch(i){this.processed=!0,e(i)}},l.async=function(){var t=this;return this.processed?new Promise((function(e,r){t.error?r(t.error):e(t.stringify())})):(this.processing\|\|(this.processing=new

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 38a668eb-401e-00ac-34a1-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153228Z-15b8b599d885v8r9hC1TEB104g000000065g00000000czvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c8271f5e-801e-008c-7000-3f7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153228Z-174c587ffdfdwxdvhC1TEB1c4n00000005xg00000000wrks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153228Z-174c587ffdfks6tlhC1TEBeza40000000680000000007cbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2309915e-d01e-0014-6179-3eed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153228Z-15b8b599d885ffrhhC1TEBtuv0000000065000000000h3sr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:28 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 482df903-301e-005d-4bb5-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153229Z-178bfbc474bvjk8shC1NYC83ns00000007m0000000001t9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:30 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6b17e566-f01e-003f-7a44-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153231Z-15b8b599d88cn5thhC1TEBqxkn000000061g0000000097kx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49834	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:30 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:31 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21290029 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 25 Nov 2024 15:32:31 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-11-25 15:32:31 UTC	15682	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-25 15:32:31 UTC	1492	IN	Data Raw: 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:31 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c63dd3a8-001e-0017-61d8-3d0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153231Z-178bfbc474bbcwv4hC1NYCypys00000007f000000000h9gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:31 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:31 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7397a655-c01e-000b-4bbf-3ee255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153231Z-178bfbc474bmqmgjhC1NYCy16c00000007sg000000008qbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:31 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea7a0cbc-701e-001e-589c-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153231Z-178bfbc474btvfdfhC1NYCa2en00000007ng00000000nh81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:31 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153231Z-178bfbc474bpscmfhC1NYCfc2c000000068000000000crrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:31 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49839	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:32 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 508951 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:32 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cfa5d8ca-401e-00b6-4bae-3af311000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-11-25 15:32:32 UTC	15653	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 28 6e 29 2c 6f 28 72 29 3f 28 65 3f 74 28 72 2c 6e 29 3a 72 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 72 29 3a 72 7d 7d 28 29 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 37 30 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 6e 28 65 2c 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 6f 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 35 33 39 29 2c 73 3d 72 28 35 38 39 29 2c 75 3d 69 2e 70 72 6f 63 65 73 Data Ascii: (n),o(r)?(e?t(r,n):r.__proto__=n,r):r}}():undefined)},function(t,e,r){"use strict";var n=r(570),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw new o("Incorrect invocation")}},,function(t,e,r){"use strict";var n,o,i=r(539),s=r(589),u=i.proces
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 72 2e 74 79 70 65 26 26 72 2e 70 72 6f 70 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 28 65 3d 74 2c 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 7d 29 29 29 7d 7d 2c 7b 6b 65 79 3a 22 77 61 6c 6b 52 75 6c 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 Data Ascii: )return e(r,n)})):this.walk((function(r,n){if("decl"===r.type&&r.prop===t)return e(r,n)})):(e=t,this.walk((function(t,r){if("decl"===t.type)return e(t,r)})))}},{key:"walkRules",value:function(t,e){return e?t instanceof RegExp?this.walk((function(r,n){if("
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 66 66 65 72 22 3d 3d 3d 65 2e 74 79 70 65 26 26 69 28 65 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 68 28 74 2c 65 2e 64 61 74 61 29 7d 76 61 72 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 73 69 7a 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 27 29 3b Data Ascii: ffer"===e.type&&i(e.data))return h(t,e.data)}var n;throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(t,e)}function f(t){if("number"!=typeof t)throw new TypeError('"size" argument must be a number');
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 74 6f 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 6e 3d 65 2c 65 3d 30 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 6e 3d 72 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6f 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 6f 3c 32 35 36 26 26 28 74 3d 6f 29 7d 69 66 28 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 6e 63 6f 64 69 6e 67 20 Data Ascii: totype.fill=function(t,e,r,n){if("string"==typeof t){if("string"==typeof e?(n=e,e=0,r=this.length):"string"==typeof r&&(n=r,r=this.length),1===t.length){var o=t.charCodeAt(0);o<256&&(t=o)}if(n!==undefined&&"string"!=typeof n)throw new TypeError("encoding
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 21 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 7d 28 29 7d 28 29 3f 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 65 2c 72 7c 7c 5b 5d 2c 66 28 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 65 2e 61 70 70 6c 79 28 74 2c 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 28 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f Data Ascii: tion(){try{var t=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){})))}catch(t){}return function(){return!!t}()}()?Reflect.construct(e,r\|\|[],f(t).constructor):e.apply(t,r))}function f(t){return(f=Object.setPrototypeOf?Object.getPro
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 7d 28 28 28 6e 3d 72 28 37 32 37 29 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 22 64 65 66 61 75 6c 74 22 3a 6e 7d 29 5b 22 64 65 66 61 75 6c 74 22 5d 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6f 2c 74 2e 65 78 70 6f 72 74 73 3d 65 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: }(((n=r(727))&&n.__esModule?n:{"default":n})["default"]);e["default"]=o,t.exports=e["default"]},function(t,e,r){"use strict";function n(t){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 38 30 38 29 2c 69 3d 72 28 35 35 36 29 2c 73 3d 72 28 35 34 33 29 2c 75 3d 72 28 35 36 30 29 2c 61 3d 72 28 36 33 32 29 3b 65 2e 66 3d 6e 26 26 21 6f 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 28 74 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 75 28 65 29 2c 6f 3d 61 28 65 29 2c 63 3d 6f 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 63 3e 66 3b 29 69 2e 66 28 74 2c 72 3d 6f 5b 66 2b 2b 5d 2c 6e 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 Data Ascii: ",t.exports="[object z]"===String(n)},function(t,e,r){"use strict";var n=r(540),o=r(808),i=r(556),s=r(543),u=r(560),a=r(632);e.f=n&&!o?Object.defineProperties:function(t,e){s(t);for(var r,n=u(e),o=a(e),c=o.length,f=0;c>f;)i.f(t,r=o[f++],n[r]);return t}},f
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 72 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 Data Ascii: =!0),Object.defineProperty(t,i(n.key),n)}}function i(t){var e=function(t,e){if("object"!=n(t)\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var o=r.call(t,e\|\|"default");if("object"!=n(o))return o;throw new TypeError("@@toPrimitive must return a
2024-11-25 15:32:32 UTC	16383	IN	Data Raw: 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6c 2e 77 61 72 6e 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 79 6e 63 28 29 2e 77 61 72 6e 69 6e 67 73 28 29 7d 2c 6c 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 73 7d 2c 6c 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 74 2c 65 29 7d 2c 6c 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 5b 22 63 61 74 63 68 22 5d 28 74 29 7d 2c 6c 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: t.prototype;return l.warnings=function(){return this.sync().warnings()},l.toString=function(){return this.css},l.then=function(t,e){return this.async().then(t,e)},l["catch"]=function(t){return this.async()["catch"](t)},l["finally"]=function(t){return this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49840	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:32 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21203857 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 25 Nov 2024 15:32:32 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-11-25 15:32:32 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49842	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:32 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21289835 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 25 Nov 2024 15:32:32 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-11-25 15:32:32 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49841	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:31 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:32 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21289875 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 25 Nov 2024 15:32:32 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-11-25 15:32:32 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49844	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:32 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:33 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8740850 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:32 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-11-25 15:32:33 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-25 15:32:33 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-11-25 15:32:33 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-11-25 15:32:33 UTC	3	IN	Data Raw: 73 74 72 Data Ascii: str
2024-11-25 15:32:33 UTC	16383	IN	Data Raw: 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 44 Data Ascii: ict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\uD
2024-11-25 15:32:33 UTC	16383	IN	Data Raw: 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 Data Ascii: rks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.marku
2024-11-25 15:32:33 UTC	16383	IN	Data Raw: 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c Data Ascii: n r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",
2024-11-25 15:32:33 UTC	15468	IN	Data Raw: 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 Data Ascii: alance_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49845	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 39 59 78 57 30 73 55 45 45 43 66 73 4c 75 6a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 36 65 33 66 31 33 62 65 63 36 35 64 37 34 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 99YxW0sUEECfsLuj.1Context: 46e3f13bec65d744
2024-11-25 15:32:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 15:32:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 39 59 78 57 30 73 55 45 45 43 66 73 4c 75 6a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 36 65 33 66 31 33 62 65 63 36 35 64 37 34 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 55 31 51 41 66 4f 79 6d 76 64 73 71 50 7a 54 33 78 51 2b 33 59 30 73 4a 6f 6e 42 68 72 58 50 44 74 4d 42 67 30 58 63 6b 68 75 45 44 46 7a 4a 43 4f 6b 67 39 45 7a 39 49 78 6c 39 6b 6e 6f 46 55 70 32 34 59 61 45 6d 56 38 2f 65 79 2b 72 56 70 78 62 45 61 33 4e 69 47 52 2b 64 39 32 39 4b 34 79 79 51 50 56 4b 4c 76 59 55 61 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 99YxW0sUEECfsLuj.2Context: 46e3f13bec65d744<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeU1QAfOymvdsqPzT3xQ+3Y0sJonBhrXPDtMBg0XckhuEDFzJCOkg9Ez9Ixl9knoFUp24YaEmV8/ey+rVpxbEa3NiGR+d929K4yyQPVKLvYUaS
2024-11-25 15:32:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 39 59 78 57 30 73 55 45 45 43 66 73 4c 75 6a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 36 65 33 66 31 33 62 65 63 36 35 64 37 34 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 99YxW0sUEECfsLuj.3Context: 46e3f13bec65d744<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 15:32:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 15:32:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 32 48 6a 65 4e 72 76 61 55 4f 44 52 51 73 63 50 39 75 47 5a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /2HjeNrvaUODRQscP9uGZg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:33 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:33 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 40f78568-a01e-0050-01c6-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153233Z-178bfbc474bw8bwphC1NYC38b400000007g000000000bd3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:33 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:33 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153233Z-178bfbc474bh5zbqhC1NYCkdug00000007n0000000008hup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:33 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d30a14f9-501e-0029-5748-3dd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153233Z-15b8b599d889gj5whC1TEBfyk000000005w000000000ned7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:33 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 05eafd34-a01e-00ab-40c7-3e9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153233Z-178bfbc474bgvl54hC1NYCsfuw00000007rg0000000024b1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:33 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: c9d02f83-e01e-0033-4d75-3b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153233Z-174c587ffdftv9hphC1TEBm29w000000063g00000000695h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49851	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:34 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:34 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21289837 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 25 Nov 2024 15:32:34 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-11-25 15:32:34 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49852	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:34 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:34 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21203859 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 25 Nov 2024 15:32:34 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-11-25 15:32:34 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49853	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:34 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:35 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21289877 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 25 Nov 2024 15:32:34 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-11-25 15:32:35 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49854	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:35 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:35 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8740853 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Mon, 25 Nov 2024 15:32:35 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-11-25 15:32:36 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-25 15:32:36 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-11-25 15:32:36 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-11-25 15:32:36 UTC	16383	IN	Data Raw: 73 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d Data Ascii: strict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-
2024-11-25 15:32:36 UTC	16383	IN	Data Raw: 65 4d 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 Data Ascii: eMarks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.ma
2024-11-25 15:32:36 UTC	16383	IN	Data Raw: 74 75 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 Data Ascii: turn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:35 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:35 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 53fe3565-801e-00a3-243f-3e7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153235Z-15b8b599d882zv28hC1TEBdchn00000005y000000000mkut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:35 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:35 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153235Z-178bfbc474bscnbchC1NYCe7eg00000007q000000000s4f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:35 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 00606c4f-d01e-0014-08c3-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153235Z-15b8b599d88f9wfchC1TEBm2kc000000064g00000000r446 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:35 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 07e1bf82-901e-0029-4cbf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153236Z-178bfbc474bp8mkvhC1NYCzqnn00000007fg00000000evt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:35 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9d7b10d0-e01e-0099-63bc-3bda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153236Z-15b8b599d88s6mj9hC1TEBur3000000005ug00000000r2ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:37 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 2727b5de-901e-005b-4cc1-3e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153238Z-178bfbc474bbcwv4hC1NYCypys00000007n000000000020t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:38 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:38 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d62908be-201e-0000-1eea-3ea537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153238Z-15b8b599d882zv28hC1TEBdchn000000061000000000bbec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:38 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:38 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00c17fdd-701e-000d-2f70-3c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153238Z-174c587ffdfb5q56hC1TEB04kg000000060g00000000k757 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:38 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d1af82e8-201e-00aa-6ffc-3d3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153238Z-15b8b599d885v8r9hC1TEB104g000000061g00000000ts75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:38 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 14aff01d-f01e-005d-5831-3d13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153238Z-15b8b599d88g5tp8hC1TEByx6w000000064g000000008fbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:40 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:40 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fb43cdc2-901e-0064-4ebf-3ee8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153240Z-178bfbc474brk967hC1NYCfu6000000007b000000000rcav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:40 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:40 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:40 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: c53d1c68-c01e-0079-4ae2-3de51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153240Z-178bfbc474bh5zbqhC1NYCkdug00000007gg00000000nefe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:40 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:40 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:40 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 512d0a55-c01e-0079-2cc0-3ee51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153240Z-178bfbc474bfw4gbhC1NYCunf400000007hg00000000swws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:40 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:40 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:40 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 2c6bdbd8-801e-0035-0204-3e752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153240Z-178bfbc474bbbqrhhC1NYCvw7400000007pg00000000tess x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:40 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:40 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:40 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: def4d052-b01e-0053-1eaf-3ecdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153240Z-15b8b599d88n8stkhC1TEBb78n0000000110000000006uun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:41 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49872	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:41 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:42 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21289989 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 25 Nov 2024 15:32:42 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-11-25 15:32:42 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49870	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:41 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:42 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21290167 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 25 Nov 2024 15:32:42 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-11-25 15:32:42 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:42 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:42 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4ba44194-501e-0047-0aeb-3ece6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153242Z-15b8b599d88l2dpthC1TEBmzr0000000064000000000854t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:42 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:42 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:42 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:42 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 149a8621-501e-0029-28a6-3ed0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153242Z-174c587ffdfp4vpjhC1TEBybqw000000065g000000008bgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 15:32:42 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:42 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:42 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: cf1029bf-101e-0017-7ef6-3e47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153242Z-15b8b599d88n8stkhC1TEBb78n000000012g000000001xd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:43 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:42 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:43 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 259521f4-f01e-003f-28c0-3ed19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153243Z-178bfbc474bbbqrhhC1NYCvw7400000007qg00000000rd6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:43 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:43 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:43 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:43 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 2993e210-601e-005c-5aea-3ef06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153243Z-15b8b599d88n8stkhC1TEBb78n00000000xg00000000k4xr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 15:32:43 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49878	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:44 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:44 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21289991 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 25 Nov 2024 15:32:44 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-11-25 15:32:44 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49880	152.199.21.175	443	2704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:44 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 15:32:44 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21290169 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 25 Nov 2024 15:32:44 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-11-25 15:32:44 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:44 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:45 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: dc29ec34-f01e-0052-689c-3d9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153245Z-174c587ffdfdwxdvhC1TEB1c4n0000000630000000008nr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:45 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:44 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:45 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 60e4dcd6-901e-0029-6d32-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153245Z-174c587ffdfx984chC1TEB676g000000062000000000nnp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:45 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:44 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:45 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 71a2c45e-801e-008c-45c1-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153245Z-178bfbc474bnwsh4hC1NYC2ubs00000007t0000000006txp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:45 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 15:32:45 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 15:32:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 15:32:45 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: e04d5a2d-b01e-003d-70c1-3ed32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T153245Z-174c587ffdf89smkhC1TEB697s000000062000000000xtev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 15:32:45 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Target ID:	2
Start time:	10:31:54
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	10:31:58
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2536,i,3064919927911151291,17021055336630254570,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	10:32:00
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/nlFaCM8XJrFnjO2skhVH81eHU?domain=bizcreditservices.sharepoint.com