Edit tour

Windows Analysis Report
Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml

Overview

General Information

Sample name:	Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml
Analysis ID:	1562550
MD5:	3c7e6cb02d1df5168187a0d79548a96b
SHA1:	cba7b67a41765b8df8906832bd8d2e6026d439b3
SHA256:	f99473308a737ea9ab7b0d1a7d0d528d60354385ca66bf9723f3ed0f66cb0ba2
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML document with suspicious name

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2092,i,5552613923586959744,14698278382397681819,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4775Host: login.live.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 25 Nov 2024 16:57:16 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closex-content-type-options: nosniffx-xss-protection: 1; mode=blockx-frame-options: SAMEORIGINReferrer-Policy: no-referrerX-Robots-Tag: noindex, nofollowStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"Vary: Accept-Encoding

Source: chromecache_96.2.dr	String found in binary or memory: http://www.mimecast.com/
Source: chromecache_96.2.dr	String found in binary or memory: https://community.mimecast.com/docs/DOC-241
Source: Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/bsrcCxkw9pCLRZmZS8foHypG0I?domain=sherwin.cw1.ro

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443

Source: unknown	HTTPS traffic detected: 20.190.177.22:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.20.204.113:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.20.204.113:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.5:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.5:50039 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml

Initial sample: benefit

Source: classification engine

Classification label: sus22.winSHTML@25/20@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2092,i,5552613923586959744,14698278382397681819,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2092,i,5552613923586959744,14698278382397681819,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
url.us.m.mimecastprotect.com	205.139.111.117	true	false	high
security-us.m.mimecastprotect.com	170.10.128.88	true	false	high
www.google.com	142.250.181.68	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://security-us.m.mimecastprotect.com/ttpwp#/block?key=x7LPR3m-tEws89GPpZtaqw28dRJkvhPSwzzaeRJ8baXY7p6UT3F_NoK3_Q87YkhV2MzMYv1jLtabRzJ7RhMscaKZxUM3A6pzbVcHP_q9wpI	false		high
https://security-us.m.mimecastprotect.com/ttpwp	false		high
https://security-us.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js	false		high
https://url.us.m.mimecastprotect.com/s/bsrcCxkw9pCLRZmZS8foHypG0I?domain=sherwin.cw1.ro	false		high
https://security-us.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js	false		high
https://security-us.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js	false		high
https://security-us.m.mimecastprotect.com/ttpwp/resources/main.5257ca6e429949972959.js	false		high
file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml	false	Avira URL Cloud: safe	unknown
https://security-us.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.mimecast.com/	chromecache_96.2.dr	false		high
https://community.mimecast.com/docs/DOC-241	chromecache_96.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
205.139.111.117	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
170.10.128.88	security-us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562550
Start date and time:	2024-11-25 17:55:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml
Detection:	SUS
Classification:	sus22.winSHTML@25/20@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .shtml

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 216.58.208.227, 172.217.19.238, 74.125.205.84, 199.232.210.172, 34.104.35.123, 172.217.21.42, 172.217.19.10, 172.217.19.170, 172.217.19.234, 216.58.208.234, 172.217.17.42, 142.250.181.74, 142.250.181.106, 142.250.181.10, 172.217.19.202, 172.217.17.74, 142.250.181.42, 142.250.181.138, 172.217.17.35, 172.217.17.46
Excluded domains from analysis (whitelisted): clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml

Input	Output
URL: https://mimecastprotect.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://mimecastprotect.com
URL: file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click the link below to access your personalized open enrollment information for your completion:", "prominent_button_name": "Complete your Open Enrollment Form", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click the link below to access your personalized open enrollment information for your completion:", "prominent_button_name": "Complete your Open Enrollment Form", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
205.139.111.117	https://protect-us.mimecast.com/s/hYDyCPNMNpH1gQKBC1i0HxuQpT	Get hash	malicious	Unknown	Browse
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/rSQeCmZGA2SjZ8YphOhGFR82nT?domain=designrr.page	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.co.uk/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.us.m.mimecastprotect.com/s/-pSUCxkxEZsvAlx5T8fxCy57lT?domain=google.al	Get hash	malicious	Unknown	Browse
	https://www.google.es/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.us.m.mimecastprotect.com/s/I5QKC0R7PQuGrzq5UwfYC9Qr5J?domain=docssignature.z9.web.core.windows.net	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/MCQiCJ61NoI4D4wfGhDCy9EMR?domain=userinterviews.com	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/nUfdCM82E6f6DYqnIwfMuQRC-X?domain=gamma.app	Get hash	malicious	Unknown	Browse
	Updated Handbook.docx	Get hash	malicious	HTMLPhisher	Browse
	https://url.us.m.mimecastprotect.com/s/qlN0C9r7EXtY9yR0ZioUyxw?domain=airtable.com/	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/rdl8Cn5lg3fXAy8f9CFLb?domain=url2.mailanyone.net	Get hash	malicious	HTMLPhisher	Browse
239.255.255.250	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse
	Invoice-99007553423-protected.pdf	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.dxrPihnXBHUGsddmpkmwUOT9H2uuoftUJgS1ImyDp5PjZ7uor3Bx5LY8846lufrxOd-2B-2FCl5NSKC1v9uXskdIrA-3D-3DPV4X_Uxfyb-2FV90WCSGuHCd77YDe2QH-2FfxD2e5Op8ULStuWwSYUM08QLuqWk0rbdQO8p2GP5XR1Nwn9dFZi5DaOMyz92mdTvaHywQzrJIxcHTOEjrrUNll1a6cdLHKylkZo7LdScnRC-2F7iC6hnMEdduqsWXASxbd-2BZeaoWZvCDaIudlukgt9S3uZsKQeBP86XSjGCyt8CMjRvxL6j1Dyr0eym46qao7knFO6iIo9LZAeoxbyu5E6pzhyc9-2F2VP-2BlZM3Ea-2B-2FiBNpyPNxcoMEQ2om5Ig-2F7RZ8WTAt-2F5MxtsslPlJve5tzpsISP74pi-2B8USUpl-2BAaEmzHGUoeKWRMyxJH35FiSw-3D-3D	Get hash	malicious	Unknown	Browse
	Encrypt DOC2024.11.19.1983928 shared with you! (203 KB).msg	Get hash	malicious	Unknown	Browse
	AccountDocuments - christinal.docx	Get hash	malicious	Unknown	Browse
	https://ymcajeffco-my.sharepoint.com/:u:/g/personal/rcampbell_mtvernonymca_org/Eb_PxgSrk7VCrlppYfmkXowB9vCdCR2cgdVG8AQkH7BcbQ?e=b9efJ2	Get hash	malicious	HTMLPhisher	Browse
	https://app.smartsheet.com/b/form/40653cfc74264be5801922c41bc80ae9	Get hash	malicious	Unknown	Browse
	https://protection.cloze.email/r/EKJc7NAc1aGPd0140vt6MnJzYkpI4pQCyldpUEBtdFT8T8dhNmmHodcXxvKddJW4AhfqaDIQj32BX0HxSGbmPeDqDQs/n/SlBNQ05FV1NMRVRURVI/y52l9ppb.r.ap-northeast-1.awstrack.me/L0/https:%2F%2Fcloudprotectionc5f91e84a2b3d9e748f2a1d9b7e5f0c4a2b3d9e7a5pages.dynamixs.workers.dev%2F/1/010601933048cf65-492c630f-d6b3-471e-a31f-bf186231f1e8-000000/SL9CcqykWh2mQIC7eGiOMwzMSpk=185	Get hash	malicious	Unknown	Browse
	https://eastmancuts.jimdosite.com/	Get hash	malicious	Unknown	Browse
	http://ti-17-0.914trk.com	Get hash	malicious	Unknown	Browse
170.10.128.88	https://url.us.m.mimecastprotect.com/s/ilkSCZ6mm3hDOA2KCjhRFBSqQQ?domain=google.ch	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/NhduCzpA73FDm0Yhgi0C9-qzu?domain=filemail.com	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/Qm2mCJ6A6NTYMRpOiV9KIQ?domain=johndstephens-my.sharepoint.com	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
url.us.m.mimecastprotect.com	https://url.us.m.mimecastprotect.com/s/cx8GCJ6Aj8C8mZ33UVfXHy0nVz?domain=canva.com	Get hash	malicious	Unknown	Browse	205.139.111.12
	https://url.uk.m.mimecastprotect.com/s/qCW9CoOQ8clw4LF1fOHpzLEI?domain=url.us.m.mimecastprotect.com	Get hash	malicious	Unknown	Browse	205.139.111.113
	https://url.us.m.mimecastprotect.com/s/7XsKCQWmqkh6El9PsPhEHGZMGK?domain=hbgone.docdroid.com	Get hash	malicious	Unknown	Browse	207.211.31.64
	FW Important Security Policy Update.msg	Get hash	malicious	KnowBe4	Browse	207.211.31.64
	https://url.us.m.mimecastprotect.com/s/Z23rC737BJUZjykZNH8fJHo-qZq?domain=t.ly	Get hash	malicious	HTMLPhisher	Browse	207.211.31.106
	EXTERNAL Re 0282119 Approved Rosado Sons Inc. - 110524 A00001220503Receipt (2).msg	Get hash	malicious	Unknown	Browse	205.139.111.12
	Your Encrypted Message Exchange Activation Information.html	Get hash	malicious	Unknown	Browse	207.211.31.113
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse	205.139.111.12
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse	205.139.111.117
	9F5ED45E-EC48-4AD4-BB6D-A04CE331A78D.1_originalmail.eml	Get hash	malicious	HTMLPhisher	Browse	207.211.31.106
security-us.m.mimecastprotect.com	EXTERNAL Re 0282119 Approved Rosado Sons Inc. - 110524 A00001220503Receipt (2).msg	Get hash	malicious	Unknown	Browse	170.10.132.87
	https://url.us.m.mimecastprotect.com/s/ilkSCZ6mm3hDOA2KCjhRFBSqQQ?domain=google.ch	Get hash	malicious	Unknown	Browse	170.10.128.88
	EXTERNAL Gina Wren shared Inv-00811 With you.msg	Get hash	malicious	Unknown	Browse	170.10.128.87
	https://url.us.m.mimecastprotect.com/s/NhduCzpA73FDm0Yhgi0C9-qzu?domain=filemail.com	Get hash	malicious	Unknown	Browse	170.10.132.88
	https://url.us.m.mimecastprotect.com/s/mQJWCv2vBJHvJ2ZuQf8CQgCZ2?domain=email.friendbuy-mail.com	Get hash	malicious	Unknown	Browse	170.10.132.87
	https://security-us.m.mimecastprotect.com/ttpwp/?tkn=3.0JfxfH8ssmm4IH6cwCFt-D9qW8OfbSAI3GS_btQfQlhldgcwCnCLHOyJ29U3WB7DtC_DhQgg-MQmn_Q3nA6YAOMW_gWm7KyNL-ia48d-H6d4D5ATg5kL5M3JPWyG3CkSJb5TEl4olwCIO6QZGRmDfJp48aiZoORuXZ_tdiGfAoM.wnVN2YKcNuAslAQ06pDpdg#/enrollment?key=7aeab67f-ce32-30f5-9feb-9cd16579fa82	Get hash	malicious	Unknown	Browse	170.10.128.89
	https://url.us.m.mimecastprotect.com/s/Qm2mCJ6A6NTYMRpOiV9KIQ?domain=johndstephens-my.sharepoint.com	Get hash	malicious	Unknown	Browse	170.10.132.89

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIMECAST-US	https://url.us.m.mimecastprotect.com/s/cx8GCJ6Aj8C8mZ33UVfXHy0nVz?domain=canva.com	Get hash	malicious	Unknown	Browse	205.139.111.12
	https://url.uk.m.mimecastprotect.com/s/qCW9CoOQ8clw4LF1fOHpzLEI?domain=url.us.m.mimecastprotect.com	Get hash	malicious	Unknown	Browse	205.139.111.113
	https://protect-us.mimecast.com/s/18vfCQWNWqS1V8BlCPhEHGoqRR	Get hash	malicious	Unknown	Browse	205.139.110.112
	https://protect-us.mimecast.com/s/hYDyCPNMNpH1gQKBC1i0HxuQpT	Get hash	malicious	Unknown	Browse	205.139.111.117
	EXTERNAL Re 0282119 Approved Rosado Sons Inc. - 110524 A00001220503Receipt (2).msg	Get hash	malicious	Unknown	Browse	205.139.111.12
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse	205.139.111.12
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse	205.139.111.117
	https://url.us.m.mimecastprotect.com/s/rSQeCmZGA2SjZ8YphOhGFR82nT?domain=designrr.page	Get hash	malicious	HTMLPhisher	Browse	205.139.111.117
	https://url.us.m.mimecastprotect.com/s/i78SCER7VQSp6YXNRsNfJF7h3vl?domain=customervoice.microsoft.com	Get hash	malicious	HTMLPhisher	Browse	205.139.111.12
	https://url.us.m.mimecastprotect.com/s/ilkSCZ6mm3hDOA2KCjhRFBSqQQ?domain=google.ch	Get hash	malicious	Unknown	Browse	170.10.128.88
MIMECAST-US	https://url.us.m.mimecastprotect.com/s/cx8GCJ6Aj8C8mZ33UVfXHy0nVz?domain=canva.com	Get hash	malicious	Unknown	Browse	205.139.111.12
	https://url.uk.m.mimecastprotect.com/s/qCW9CoOQ8clw4LF1fOHpzLEI?domain=url.us.m.mimecastprotect.com	Get hash	malicious	Unknown	Browse	205.139.111.113
	https://protect-us.mimecast.com/s/18vfCQWNWqS1V8BlCPhEHGoqRR	Get hash	malicious	Unknown	Browse	205.139.110.112
	https://protect-us.mimecast.com/s/hYDyCPNMNpH1gQKBC1i0HxuQpT	Get hash	malicious	Unknown	Browse	205.139.111.117
	EXTERNAL Re 0282119 Approved Rosado Sons Inc. - 110524 A00001220503Receipt (2).msg	Get hash	malicious	Unknown	Browse	205.139.111.12
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse	205.139.111.12
	Updated Handbook.docx	Get hash	malicious	Unknown	Browse	205.139.111.117
	https://url.us.m.mimecastprotect.com/s/rSQeCmZGA2SjZ8YphOhGFR82nT?domain=designrr.page	Get hash	malicious	HTMLPhisher	Browse	205.139.111.117
	https://url.us.m.mimecastprotect.com/s/i78SCER7VQSp6YXNRsNfJF7h3vl?domain=customervoice.microsoft.com	Get hash	malicious	HTMLPhisher	Browse	205.139.111.12
	https://url.us.m.mimecastprotect.com/s/ilkSCZ6mm3hDOA2KCjhRFBSqQQ?domain=google.ch	Get hash	malicious	Unknown	Browse	170.10.128.88

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.1.237.91
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.1.237.91
	lw2HMxuVuf.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	http://www.urbanerecycling.com	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	Invoice-99007553423-protected.pdf	Get hash	malicious	Unknown	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	https://clickme.thryv.com/ls/click?upn=u001.dxrPihnXBHUGsddmpkmwUOT9H2uuoftUJgS1ImyDp5PjZ7uor3Bx5LY8846lufrxOd-2B-2FCl5NSKC1v9uXskdIrA-3D-3DPV4X_Uxfyb-2FV90WCSGuHCd77YDe2QH-2FfxD2e5Op8ULStuWwSYUM08QLuqWk0rbdQO8p2GP5XR1Nwn9dFZi5DaOMyz92mdTvaHywQzrJIxcHTOEjrrUNll1a6cdLHKylkZo7LdScnRC-2F7iC6hnMEdduqsWXASxbd-2BZeaoWZvCDaIudlukgt9S3uZsKQeBP86XSjGCyt8CMjRvxL6j1Dyr0eym46qao7knFO6iIo9LZAeoxbyu5E6pzhyc9-2F2VP-2BlZM3Ea-2B-2FiBNpyPNxcoMEQ2om5Ig-2F7RZ8WTAt-2F5MxtsslPlJve5tzpsISP74pi-2B8USUpl-2BAaEmzHGUoeKWRMyxJH35FiSw-3D-3D	Get hash	malicious	Unknown	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	https://app.smartsheet.com/b/form/40653cfc74264be5801922c41bc80ae9	Get hash	malicious	Unknown	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	https://eastmancuts.jimdosite.com/	Get hash	malicious	Unknown	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	https://www.google.com/url?q=https://clickme.thryv.com/ls/click?upn%3Du001.3HlspJ5fg-2BP4CQkV7GSVhvWTpgC6w0k7sA8b2Z9JBYU9BEMXtqHWLHW9PPcpforJszQ3_jzclrAiO28PBUU1ZLf2yC1YJEF5Rt8zDnz4yKbEuFqXf3c0fVOhzL2fXxOYix3CjCrzlLwoIPSXb9PavK50mtpdK-2FWF7thydb3q6E5ptEQiOVUz527Ewi1t813S-2FHejAJLe09fD2VqgM8mtwuQZA9i83VLkCPF4iItCSPXKUpNgWQKWxjEO6jlBp5GYVLghrpKcDuea5GONmLMVlbh4fQe7dtjhTFxxxExxfN1kv5tnx1PPl9DjYIyE468wz1qa1Z-2FWJgZrJbIFEpqhd4o5tGGyUoiPcIot5l2j9dpjy7QKj99ZiCz-2BBLi5dHUIl8gC4RxZBl-2FMaH4IZlQyWpqM-2BtZ9uE3ezFUl2fORMwAp4lQk-3D%23Cjanetrosenbach@imageindustries.com&source=gmail-imap&ust=1733149343000000&usg=AOvVaw1uIAp-JnZbTlkY9Td9ZLJj	Get hash	malicious	HTMLPhisher	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	http://nakheel.com.staffrecords-2024auaqc-iqodlfdhb.copypremium.com/?staffrecords/2024/=c2FiaWthLmFiaWRAbmFraGVlbC5jb20=	Get hash	malicious	Unknown	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	http://esaleerugs.com	Get hash	malicious	Unknown	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse	52.149.20.212 13.107.246.63 20.190.177.22 2.20.204.113
3b5074b1b5d032e5620f69f9f700ff0e	Compilazione di video e immagini protetti da copyright.bat	Get hash	malicious	Unknown	Browse	20.198.118.190
	https://eastmancuts.jimdosite.com/	Get hash	malicious	Unknown	Browse	20.198.118.190
	https://www.google.com/url?q=https://clickme.thryv.com/ls/click?upn%3Du001.3HlspJ5fg-2BP4CQkV7GSVhvWTpgC6w0k7sA8b2Z9JBYU9BEMXtqHWLHW9PPcpforJszQ3_jzclrAiO28PBUU1ZLf2yC1YJEF5Rt8zDnz4yKbEuFqXf3c0fVOhzL2fXxOYix3CjCrzlLwoIPSXb9PavK50mtpdK-2FWF7thydb3q6E5ptEQiOVUz527Ewi1t813S-2FHejAJLe09fD2VqgM8mtwuQZA9i83VLkCPF4iItCSPXKUpNgWQKWxjEO6jlBp5GYVLghrpKcDuea5GONmLMVlbh4fQe7dtjhTFxxxExxfN1kv5tnx1PPl9DjYIyE468wz1qa1Z-2FWJgZrJbIFEpqhd4o5tGGyUoiPcIot5l2j9dpjy7QKj99ZiCz-2BBLi5dHUIl8gC4RxZBl-2FMaH4IZlQyWpqM-2BtZ9uE3ezFUl2fORMwAp4lQk-3D%23Cjanetrosenbach@imageindustries.com&source=gmail-imap&ust=1733149343000000&usg=AOvVaw1uIAp-JnZbTlkY9Td9ZLJj	Get hash	malicious	HTMLPhisher	Browse	20.198.118.190
	RICHIESTA D'OFFERTA.exe	Get hash	malicious	AgentTesla, PureLog Stealer, zgRAT	Browse	20.198.118.190
	Rooming list.js	Get hash	malicious	Remcos	Browse	20.198.118.190
	https://vectaire.doclawfederal.com/uDLtT/	Get hash	malicious	HTMLPhisher	Browse	20.198.118.190
	https://pastebin.com/raw/0v6Vhvpb	Get hash	malicious	Unknown	Browse	20.198.118.190
	DJ5PhUwOsM.exe	Get hash	malicious	AgentTesla, XWorm	Browse	20.198.118.190
	2ehwX6LWt3.exe	Get hash	malicious	XWorm	Browse	20.198.118.190

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:56:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.976472042581498
Encrypted:	false
SSDEEP:	48:8ILAdqJTKxEdHgidAKZdA19ehwiZUklqehBy+3:8ILnPUKy
MD5:	51ABC634FFB3AB220D99BE8994D0B1B3
SHA1:	AC07BAF31E88B1C1D695C48399E17574057F4378
SHA-256:	E656318C041BAFEB49E85BD757D161374B2C84666E6A665CF536E6453074FECE
SHA-512:	2860C985B1C6E48828A90361A8B4CAF5279062742103DBC126878205112DE52F2212F29E26A27D580845120F6572B35AA77298A3D215A73AE438D71C7A74CFAD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....n..[?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:56:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9943871980313266
Encrypted:	false
SSDEEP:	48:8HAdqJTKxEdHgidAKZdA1weh/iZUkAQkqeh6y+2:8HnPm9Qzy
MD5:	27906ED2D9DC2E57958067BD8A1FAEF7
SHA1:	73CBDDFB7B238B66852C8668E3D49A27076CA6A2
SHA-256:	039B6BE4B64D7BD46A34CB43D2BCB58A37D97F5ADB35BFB5A90BE4A91D765548
SHA-512:	DC57D1CC45857AE38B291FAAFDEAB51CBF2B9007DA7B9A6C72BCCB0CA7AD523E775539953CCE2C3E34F459E5D56293C64792398D6FE728B419D107D8258DE3BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....}..[?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004558046804906
Encrypted:	false
SSDEEP:	48:8xVdqJTKxEsHgidAKZdA14tseh7sFiZUkmgqeh7sEy+BX:8xQPdnmy
MD5:	9F5CEF4F4FC39B2DA21C129863BDE3F9
SHA1:	5BA2E86457EC08FAB7C85D380C4BDE569BDBF8CC
SHA-256:	AC9A2E90DAC5C0949981FE2A2DB65358E6B06618688B5A60231448F50AFAE049
SHA-512:	A42734B365388ABB0ED56C2F2A39F4AFF723BD7DB57497E5231D167DE3DFEDBFE02B77395FF1E230CBDA189BEC46D2482742F22AC0695C0C1AE087EFDF520918
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:56:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9935931772615785
Encrypted:	false
SSDEEP:	48:8BAdqJTKxEdHgidAKZdA1vehDiZUkwqehOy+R:8BnPtMy
MD5:	A5D3A2A141B14F89DE3C5B9E61C986D4
SHA1:	1965D3A8A7A4CF530E7724F57AB35FFF0F8FEEC1
SHA-256:	5011BE5EF94A76457C31759F9A73142E27BBE4F3B36222D89108B1B8B6DFF0E2
SHA-512:	6BACC10FCA6329F67EC857377FD3DEEE56BC962D9743539CE48A3F0E71131B9CD69782F4C5BDD0CC32568CCA8364EB63FDB50C6F483F916748FA704B48795AEA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V..[?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:56:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9819597472737893
Encrypted:	false
SSDEEP:	48:8LAdqJTKxEdHgidAKZdA1hehBiZUk1W1qehQy+C:8LnPt9wy
MD5:	1D2FD6ACC6AA0D0EB016CE0C85EFD88D
SHA1:	80A18FD63D639C116DDA7122493695213696441D
SHA-256:	C2522E86A25DA65E4CD0909B2654974E3E079203A2A08B72E952BCA7A43AACC9
SHA-512:	C7F848563B1417C821486D09A7090341E1E7E7C553529882D492431309568BB1C7EAE89A917F4407668B7A61DA5B147F4C8261FC5FAB0B1ACE6B1F4561498D46
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....;...[?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 15:56:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.993560455928686
Encrypted:	false
SSDEEP:	48:8DAdqJTKxEdHgidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8DnPxT/TbxWOvTbmy7T
MD5:	FCA000FB4D5F3077BB7C01076E281D23
SHA1:	61DB40F25531F16A735C6DC1FF8FE5721A2E1085
SHA-256:	EB7FCC917347F00BAFE3A70B860BA7F7361D73645A50206E73EB2D1CF754C838
SHA-512:	ACDA5C9A5C6DCDAD752BDB2A80D625B7C777B446DC63F8931F2962C47E0969FA339073ED1258DD4FD73335ED3EB644003C28690FF32463117329BBB8AA9E6798
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........[?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IyY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	dropped
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1492), with no line terminators
Category:	downloaded
Size (bytes):	1492
Entropy (8bit):	5.1504605464747675
Encrypted:	false
SSDEEP:	24:ECoyffRGmcH7LprYMEw7zsQCBm3lBmGa0BTLWwMWiB/azfIvJkwIdd8BtIcf:EhyHRZclYME0QQuKTLWnBeYkVd8By8
MD5:	3AD4DE7EFFAAC3D0048EF54F8491451F
SHA1:	B807DD524C22B9F6241B1EF14AD6902D5C9D9215
SHA-256:	6C36E59711DF161A3D7A2D6FB3E5C17A8767A2F42AEADD9BF166830FDB8ACD5E
SHA-512:	B605EE47C436722BD21C501299EE1A6D96CC34D582003D6DD539AEE7A91E4EC78BFB6194E2226179627A5152DE16A7ADA2462BA5856F1FAF2647A65D24AB9CBE
Malicious:	false
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/runtime.5257ca6e429949972959.js
Preview:	!function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.shift()();return u.push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,p=1;p<t.length;p++)0!==o[t[p]]&&(n=!1);n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={0:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(l.r(t

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95292
Entropy (8bit):	5.328593318442354
Encrypted:	false
SSDEEP:	768:LocHtR35eGmh1KxjDnmHtOTEBiQq0rrW3/P880ecomGjmraHnDP64bJ9w/6hFDeY:XtRQ1TMnmHtOTShNrG/W6hFDGNC3LNqQ
MD5:	A792F7BBECA0147C515D7ECAA5479B83
SHA1:	B6B6AB4BA9403B8934E36EF587C612F86180D18B
SHA-256:	FA9682F24595628BABEF9DAC52F38DCB373C4EBA5E555339CC0666B67EEADDAE
SHA-512:	0A2968A420037FB82EB1B8153F687E686DB8A3DCA21EC759ACCEFE3D3C07ED84B045407B36440EFE38F1B0C20655B8389338EE6A286A882D236E74BCD53181FE
Malicious:	false
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/polyfills.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))};void 0===(i="function"==typeof(r=function(){!function(e){var t=e.performance;function n(e){t&&t.mark&&t.mark(e)}function r(e,n){t&&t.measure&&t.measure(e,n)}n("Zone");var i=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function o(e){return i+e}var a=!0===e[o("forceDuplicateZoneCheck")];if(e.Zone){if(a\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}var s=function(){function t(e,t){this._parent=e,this._name=t?t.name\|\|"unnamed":"<root>",this._properties=t&&t.properties\|\|{},this._zoneDelegate=new l(this,this._parent&&this._parent._zoneDelegate,t)}return t.assertZonePatched=function(){if(e.Promise!==R.ZoneAwarePromise)throw new Error("

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.28732561467651
Encrypted:	false
SSDEEP:	12:qmiiaZgszpGHr0Tn8D+c35COXpapjD4k1PZiwae4vPdeegbOh6mv8n:AusLGfEhB9a6mE
MD5:	44385673EEF386EC121603CD302FD05F
SHA1:	C15A6D61054FFB16D8DF4DA943B545349FC82631
SHA-256:	069E8A1E31ABA074CC28BC9D6D54C67495BD42A02115DC232BE7C8D9F83E40A8
SHA-512:	E80C43BE006B5EEB66F98192B177163E92B75A5CD0AAA880ADE24A67DB7A1F29A0CB958B158244DB47386CDC775DD025E0FC1F97E3D7ADCDDB76D347F3073DA7
Malicious:	false
Preview:	............ .h.......(....... ..... .........................................................................................................\|kW.\|kW.................................................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW2............................\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....\|kW.\|kW.\|kWX....................\|kW.\|kW.\|kW.........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW<................\|kWm\|kW.\|kW.........\|kW.\|kW.\|kWg\|kW.\|kW.\|kW.\|kW.\|kW.................\|kW.\|kW.\|kW.\|kW.\|kW.\|kWn....\|kW.\|kW.\|kW.\|kW.\|kWr....................\|kWn\|kW.\|kW.\|kWU........\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.....................\|kW\|\|kWe............\|kW.\|kW.\|kW.\|kW.\|kW.\|kW=....................\|kW.\|kWa\|kW.\|kW.\|kW.\|kW{\|kW.\|kW.\|kW}\|kW.\|kW.................\|kW)\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWy\|kW.................\|kWW\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`............\|kWN\|kW.................\|kW`\|kW.\|kW.\|kW.\|kW.\|kW.\|kW`\|kW.\|kWb\|kW.\|kW.\|kW.................\|kW.\|kW&\|kWS\|kW.\|kW.\|kW.\|kW.\|kW.\|kW.\|kW~\|kW@\|kW ................................\|kW.\|kW.\|kW.\|k

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
URL:	https://security-us.m.mimecastprotect.com/ttpwp/resources/styles.5257ca6e429949972959.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	410447
Entropy (8bit):	4.969948893141297
Encrypted:	false
SSDEEP:	1536:UgttQTtsXFCVwRFtoN5h6SF9t/kqpEE9lcl2ldk66LebnuyMKdPSNZSp+4e4VgHo:UG7RFtoN5OebnuyRdPSPSEGR
MD5:	0AF2F9447CC29B13B5986BB0B2DF1201
SHA1:	18A26C55CB12A8CB5A40738D63EBBADFF9C9E157
SHA-256:	DD23B2D3B699647A55640F98703B96CF76473C19969E11AB05653DBDF5ABCE0C
SHA-512:	2FBAED69A7952BF59AA5EBD987A736AB90F1C1E1547886C8634768EEC6CFB02D0A733ECFC2F0935DC2E7A44D87071044EEC39F2005D1EBBC0F97B6BCC8486B8C
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".concat(e[2]," {").concat(o,"}"):o}).join("")},e.i=function(n,o,t){"string"==typeof n&&(n=[[null,n,""]]);var a={};if(t)for(var r=0;r<this.length;r++){var c=this[r][0];null!=c&&(a[c]=!0)}for(var l=0;l<n.length;l++){var i=[].concat(n[l]);t&&a[i[0]]\|\|(o&&(i[2]=i[2]?"".concat(o," and ").concat(i[2]):o),e.push(i))}},e}},LboF:function(n,e,o){"use strict";var t,a=function(){var n={};return function(e){if(void 0===n[e]){var o=document.querySelector(e);if(window.HTMLIFrameElement&&o instanceof window.HTMLIFrameElement)try{o=o.contentDocument.head}catch(t){o=null}n[e]=o}return n[e]}}(),r=[];function c(n){for(var e=-1,o=0;o<r.length;o++)if(r[o].identifier===n){e=o;break}return e}function l(n,e){for(var o={},t=[],a=0;a<n.length;a++){var l=n[a],i=e.base

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2088)
Category:	downloaded
Size (bytes):	3447
Entropy (8bit):	5.385539600942633
Encrypted:	false
SSDEEP:	48:08kjiKt+nPnlS2yYXyPXyBlt+nPnlS2yYXyPXybWIiMjLA:0t+nvlmYCK3t+nvlmYCKblQ
MD5:	C286C6FD6BFE7C3FAF59157B7AA0FD39
SHA1:	25D2FF78EB12EF3DB2A3907E8D2CE39C1C5505D9
SHA-256:	1062224668A272A46FF501E338702C675FF7EF413009FF3FA8E5D42BA37A90C4
SHA-512:	55F60ECBE7A0CDC251D8291F9EA40E55CE8B5C0845D1A49476926E1C711882CEF897414C860E95DE43E27282232CC57727203C8F6E5F029D4163BECACD81BB4F
Malicious:	false
URL:	https://security-us.m.mimecastprotect.com/ttpwp
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1">. <title>Mimecast TTP Web Portal</title>. <meta name="apple-mobile-web-app-capable" content="yes">. [if lte IE 10]> <link rel="icon" href="/ttpwp/resources/images/favicon.ico" /> <![endif]-->. <link rel="shortcut icon" href="/ttpwp/resources/images/favicon.ico" />. <link rel="apple-touch-icon" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. <link rel="apple-touch-icon-precomposed" sizes="152x152" href="/ttpwp/resources/images/favicon-mobile.png" />. . . <script>window.mimecast = {"branding":{"defaultBranding":{"defaultConfiguration":{"knowledgeBase":{"href":"https://community.mimecast.com/docs/DOC-241","label":"LOGIN_HOME_LNK"},"home":{"href":"http://www.mimec

Static File Info

General

File type:	HTML document, ASCII text, with CRLF, LF line terminators
Entropy (8bit):	4.4687828873857525
TrID:	HyperText Markup Language (15015/1) 30.63% HyperText Markup Language (11501/1) 23.46% HyperText Markup Language (11501/1) 23.46% HyperText Markup Language (11001/1) 22.44%
File name:	Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml
File size:	1'713 bytes
MD5:	3c7e6cb02d1df5168187a0d79548a96b
SHA1:	cba7b67a41765b8df8906832bd8d2e6026d439b3
SHA256:	f99473308a737ea9ab7b0d1a7d0d528d60354385ca66bf9723f3ed0f66cb0ba2
SHA512:	97226eb864da7cf0ea2c36fccff6dc1b5cc5477129d0f6d94f6c85a43dbef97eabff7e8799b12405dae3361be70252f7607182cbd9816c137060176e5b1655fe
SSDEEP:	24:hYkCHdBO/cAv7ECa3ql62u0qimqQW0CFSTl+YJff/PqnQZNORtxXvdG/wlgri:m5CPlDrmcbIl/J9q0Y6i
TLSH:	7931DFA7DAE30052A08741546BF5B7452F62C513860FCD267E8CA3A8CFC5EA19AE325C
File Content Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Proofpoint Compatible Attachment</title>. <style>. body {. font-family: Arial, sa

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 17:56:25.886523008 CET	49675	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:25.886523962 CET	49674	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:26.120878935 CET	49673	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:32.143958092 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.144012928 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.144025087 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.144038916 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.144049883 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.144062042 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.144063950 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.144083977 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.144124031 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.152508020 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.152662992 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.152723074 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.161355972 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.161504030 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.161555052 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.169828892 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.169941902 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.169991016 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.178394079 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.178457975 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.178520918 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:32.345504999 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.345570087 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:32.345624924 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:34.483433008 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:34.483685970 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:34.606576920 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:34.606791973 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:34.606802940 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:34.606851101 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.496113062 CET	49675	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:35.540837049 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.540919065 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.540968895 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.545046091 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.545097113 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.545151949 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.553574085 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.553699970 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.553755045 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.562220097 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.562453985 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.562521935 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.570691109 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.570794106 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.570861101 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.683319092 CET	49674	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:35.730222940 CET	49673	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:35.753254890 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.753307104 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:35.880227089 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.880249023 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.880287886 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:35.880300045 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.414998055 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.415076017 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.415131092 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.419329882 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.419477940 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.419529915 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.428126097 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.428232908 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.428292036 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.436592102 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.436646938 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.436703920 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.445223093 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.445277929 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.445502996 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.469731092 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.469773054 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.471056938 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.471123934 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:36.590327978 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.590363979 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.590420008 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.590449095 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.590476036 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.591567039 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.591636896 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.591685057 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.591734886 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.591871977 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:36.659507990 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:36.659555912 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:36.659625053 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:36.659926891 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:36.659940958 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:37.226238966 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.226430893 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.226509094 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.230519056 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.230667114 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.230724096 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.239084959 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.242249012 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.242309093 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.242362022 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.243536949 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.243566990 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.243630886 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.246047020 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.246269941 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.246341944 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.250967979 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.251055002 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.251055002 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.254615068 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.254755974 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.254812002 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.259466887 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.259522915 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.263196945 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.263493061 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.263561964 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.271867037 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.271939039 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.272003889 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.280333042 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:56:37.323976040 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:56:37.444773912 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:37.444808006 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:37.444822073 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:37.444839954 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:37.444884062 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:37.444911003 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:37.445764065 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:37.445780993 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:37.445862055 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:37.445878983 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:38.221364975 CET	443	49707	23.1.237.91	192.168.2.5
Nov 25, 2024 17:56:38.224111080 CET	49707	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:56:38.511065960 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:38.511188030 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:38.778007984 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:38.778049946 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:38.778418064 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:38.780334949 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:38.780379057 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:38.780452013 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.460249901 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.460272074 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.460361004 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.460376024 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.460448027 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.570908070 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.570908070 CET	49713	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.570981979 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.571016073 CET	443	49713	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.610856056 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.610888004 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.610984087 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.611210108 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:39.611227036 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:39.881805897 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:39.881926060 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:39.921165943 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:39.921263933 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.430916071 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.430948973 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.431333065 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.431806087 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.431829929 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.432214975 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.471575975 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:41.480206013 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.480230093 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.511440039 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:41.513089895 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.513184071 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.513197899 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.513464928 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.555365086 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.848071098 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.848217964 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.848241091 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:41.848694086 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:41.849669933 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:41.849693060 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:41.850780010 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:41.850795984 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:41.850825071 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:41.850836039 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:41.891324997 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.172319889 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:42.172367096 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:42.172472000 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:42.176486015 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:42.176510096 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:42.188983917 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.189182043 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.189243078 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:42.189455986 CET	49715	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:42.189497948 CET	443	49715	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.511626959 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.511732101 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.511842966 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:42.541873932 CET	49714	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:42.541913033 CET	443	49714	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:42.830573082 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:42.830606937 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:42.830621958 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:42.830651045 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:42.830707073 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:42.830786943 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:42.889128923 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:42.889162064 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:42.889177084 CET	49717	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:42.889183044 CET	443	49717	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:43.102777004 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:43.102806091 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:43.102874994 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:43.104562044 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:43.104577065 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:43.943238020 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:43.943408012 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:43.944977999 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:43.944988966 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:43.945250988 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:43.954813004 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:43.995336056 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.429202080 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.429229021 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.429244041 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.429277897 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.429302931 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.429352045 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.429364920 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.605200052 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.605226994 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.605278015 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.605314970 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.605334997 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.606442928 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.657277107 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.657299995 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.657403946 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.657438040 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.657664061 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.883928061 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.883946896 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.883996964 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.884018898 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.884037018 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.884074926 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.884085894 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.926054001 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.926073074 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.926135063 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.926146984 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.926192045 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.974419117 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.974440098 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.974498987 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.974513054 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:44.974550962 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:44.974561930 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.018498898 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.018521070 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.018588066 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.018604040 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.018647909 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.116885900 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.116909027 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.116960049 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.116980076 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.116997957 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.117018938 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.128369093 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.133299112 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.133317947 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.133377075 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.133398056 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.133761883 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.140085936 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.140119076 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.143861055 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.143877029 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.143906116 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.143918037 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.147892952 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.147917032 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.147979975 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.148005962 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.148061037 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.165641069 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.165669918 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.165760994 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.165774107 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.165815115 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.211586952 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.211632967 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.211684942 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.211708069 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.211741924 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.211770058 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.236131907 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.236162901 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.236232996 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.236260891 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.236521006 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.241468906 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.241566896 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.241569042 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.241619110 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.256587029 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.256640911 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.256661892 CET	49718	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.256676912 CET	443	49718	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.402640104 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.402782917 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.402904034 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.403830051 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.403877974 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.403944969 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.404285908 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.404311895 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.404366970 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405174017 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405183077 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.405292034 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405402899 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405396938 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405441046 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.405466080 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.405517101 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405606031 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405625105 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.405687094 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405703068 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.405761957 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405775070 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.405955076 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:45.405983925 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:45.823548079 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.823575020 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.823610067 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.823657990 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.823669910 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.823697090 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.823724985 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.826600075 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.826632977 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:45.826661110 CET	49719	443	192.168.2.5	20.190.177.22
Nov 25, 2024 17:56:45.826692104 CET	443	49719	20.190.177.22	192.168.2.5
Nov 25, 2024 17:56:47.170248985 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.171130896 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.171174049 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.173300982 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.173316956 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.193865061 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.194266081 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.194293022 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.194906950 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.194914103 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.202059984 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.203440905 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.203453064 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.204037905 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.204045057 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.228529930 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.239945889 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.239968061 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.240405083 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.240411997 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.312715054 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.313631058 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.313673019 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.314342976 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.314351082 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.363562107 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:47.363604069 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:47.363668919 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:47.364037037 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:47.364052057 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:47.408370972 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:47.408422947 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:47.408508062 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:47.411899090 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:47.411914110 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:47.614459991 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.614486933 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.614578962 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.614597082 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.614640951 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.614842892 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.614850044 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.614870071 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.615060091 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.615092993 CET	443	49730	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.615161896 CET	49730	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.617887974 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.617935896 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.618097067 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.618254900 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.618275881 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.632916927 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.632997036 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.633498907 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.633534908 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.633552074 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.633577108 CET	49729	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.633583069 CET	443	49729	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.636454105 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.636492968 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.636667013 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.636729956 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.636739016 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.654653072 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.654678106 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.654764891 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.654783964 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.655035973 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.655051947 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.655060053 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.655198097 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.655230045 CET	443	49731	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.655297041 CET	49731	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.657613039 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.657651901 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.657957077 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.658096075 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.658113956 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.679614067 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.679642916 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.679711103 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.679744959 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.679920912 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.679975986 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.679987907 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.680007935 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.680175066 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.680205107 CET	443	49728	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.680255890 CET	49728	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.682743073 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.682791948 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.682914972 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.683124065 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.683135033 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.774149895 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.774225950 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.774406910 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.774493933 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.774519920 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.774533987 CET	49732	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.774543047 CET	443	49732	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.777525902 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.777556896 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:47.777623892 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.777817011 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:47.777832031 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:48.647922039 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:48.647980928 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:48.648047924 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:48.649444103 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:48.649456978 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:49.127005100 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:49.127326965 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:49.127341032 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:49.128390074 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:49.128470898 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:49.129602909 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:49.129669905 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:49.171833992 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:49.171847105 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:49.218708992 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:49.284260035 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:49.284356117 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:49.286515951 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:49.286528111 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:49.286983013 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:49.328088999 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:49.352041006 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:49.395327091 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:49.444189072 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.444700003 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.444710970 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.445183992 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.445188999 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.507445097 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.508519888 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.508541107 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.509000063 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.509006023 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.510418892 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.510740995 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.510750055 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.511116982 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.511122942 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.664813995 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.665591955 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.665612936 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.666352987 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.666357994 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.672171116 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.672730923 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.672739029 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.673351049 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.673356056 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.883574963 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.883641958 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.883752108 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.883964062 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.883964062 CET	49738	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.883985996 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.883996964 CET	443	49738	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.886970997 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.887003899 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.887129068 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.887293100 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.887305975 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.953522921 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.953603983 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.953653097 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.953907013 CET	49739	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.953921080 CET	443	49739	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.955579996 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.955643892 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.955784082 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.956125975 CET	49737	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.956130981 CET	443	49737	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.957638979 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.957662106 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.957741022 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.957988024 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.957998037 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.959110022 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.959150076 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:49.959311008 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.959458113 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:49.959476948 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.012300968 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.012325048 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.012332916 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.012342930 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.012366056 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.012401104 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.012419939 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.012437105 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.012484074 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.028865099 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.028937101 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.028948069 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.029916048 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.029928923 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.029968977 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.030116081 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.030148983 CET	443	49736	52.149.20.212	192.168.2.5
Nov 25, 2024 17:56:50.030220985 CET	49736	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:56:50.110313892 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.110387087 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.110563040 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.112104893 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.112104893 CET	49742	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.112122059 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.112133026 CET	443	49742	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.114821911 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.114887953 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.117594004 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.117600918 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.117870092 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.117935896 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.117995024 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.118038893 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.118958950 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.118990898 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.119117975 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.121042967 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.121042967 CET	49740	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.121049881 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.121057987 CET	443	49740	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.129225016 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.129242897 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.133186102 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.133217096 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.133316994 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.138422012 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:50.138434887 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:50.171823978 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.177328110 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.223324060 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.650754929 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.650830984 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.650904894 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.651048899 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.651068926 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.651076078 CET	49744	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.651082993 CET	443	49744	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.845508099 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.845557928 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:50.845640898 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.845972061 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:50.845990896 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:51.730135918 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.731043100 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:51.731071949 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.731782913 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:51.731791019 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.784302950 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.784797907 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:51.784820080 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.785298109 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:51.785306931 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.862874031 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.863456011 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:51.863470078 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:51.863944054 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:51.863950968 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.006867886 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.007412910 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.007426023 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.007885933 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.007890940 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.016427994 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.017163992 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.017174006 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.017790079 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.017795086 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.113286018 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:52.113343000 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:52.113418102 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:52.114698887 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:52.114717007 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:52.123442888 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:52.123501062 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:52.123604059 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:52.127742052 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:52.127760887 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:52.164314032 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:52.164346933 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:52.164432049 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:52.165833950 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:52.165880919 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:52.165961027 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:52.166534901 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:52.166548014 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:52.166810989 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:52.166827917 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:52.248876095 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.248969078 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.249022961 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.252208948 CET	49746	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.252227068 CET	443	49746	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.256719112 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.256745100 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.256809950 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.257626057 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.257644892 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.293054104 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.293123960 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.293231010 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.299261093 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.299287081 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.299302101 CET	49745	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.299309969 CET	443	49745	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.303101063 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.303137064 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.303283930 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.304562092 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.304574013 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.349354982 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.349417925 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.349693060 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.349921942 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.349921942 CET	49747	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.349940062 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.349951029 CET	443	49747	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.400806904 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:52.400909901 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:52.538887978 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.538969994 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.539129019 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.542951107 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.543085098 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.543174982 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.628767967 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.628792048 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.628849030 CET	49748	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.628856897 CET	443	49748	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.628874063 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:52.628912926 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:52.629312038 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:52.629439116 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.629463911 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.629476070 CET	49749	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.629482031 CET	443	49749	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.630594015 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:52.632723093 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.632760048 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.632913113 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.633382082 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.633426905 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.633495092 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.633723974 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.633740902 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.634160042 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.634175062 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.634485960 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.634519100 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.634572029 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.634685040 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:52.634700060 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:52.675343037 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:53.170159101 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:53.170345068 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:53.170434952 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:53.171411991 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:53.171439886 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:53.171456099 CET	49750	443	192.168.2.5	2.20.204.113
Nov 25, 2024 17:56:53.171463013 CET	443	49750	2.20.204.113	192.168.2.5
Nov 25, 2024 17:56:53.616440058 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.616733074 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.616750002 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.617885113 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.617943048 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.619096041 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.619170904 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.619261980 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.619270086 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.671144962 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.679949045 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.680157900 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.680185080 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.681260109 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.681322098 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.681634903 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.681704998 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.734313011 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:53.734349012 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:53.781651974 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:54.297182083 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.298190117 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.298228025 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.298650980 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.298656940 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.317023039 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.317528963 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.317562103 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.317953110 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.317959070 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.344760895 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:54.344774961 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:54.344836950 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:54.344878912 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:54.344914913 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:54.347598076 CET	49755	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:54.347613096 CET	443	49755	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:54.348444939 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:56:54.348707914 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:56:54.415502071 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.415595055 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.418576002 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.418589115 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.418948889 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.422142029 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.422215939 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.422224998 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.422328949 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.467344046 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.530148983 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.543768883 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.543806076 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.544796944 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.544804096 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.556669950 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.556781054 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.558502913 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.558512926 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.558770895 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.560251951 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.560400963 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.560408115 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.560771942 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:54.563971996 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.564598083 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.564626932 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.565042973 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.565048933 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.603326082 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:54.730730057 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.736491919 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.736529112 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.737145901 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.737154007 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.936763048 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.936826944 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.937036037 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:54.952514887 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.952583075 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:54.952999115 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.101227999 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.101299047 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.101676941 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.254190922 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.254239082 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.254255056 CET	49757	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.254262924 CET	443	49757	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.260413885 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.260413885 CET	49756	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.260452986 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.260463953 CET	443	49756	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.271301985 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.271348953 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.271389008 CET	49758	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.271398067 CET	443	49758	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.278768063 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.278816938 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.278877974 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.280524015 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.280574083 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.280630112 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.282649994 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.282676935 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.282870054 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.282942057 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.282963991 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.283505917 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.283530951 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.283899069 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.283912897 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.343014002 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.343077898 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.343133926 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.344063997 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:55.344132900 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:55.344198942 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.344249964 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.344278097 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:55.344330072 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.345261097 CET	49752	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:55.345278025 CET	443	49752	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:55.345822096 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:55.345896959 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:55.346040964 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:55.346219063 CET	49753	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:56:55.346235991 CET	443	49753	20.198.118.190	192.168.2.5
Nov 25, 2024 17:56:55.347295046 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.347296000 CET	49759	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.347317934 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.347328901 CET	443	49759	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.347563028 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.347584963 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.347609043 CET	49760	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.347615957 CET	443	49760	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.351632118 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.351665020 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.351759911 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.353651047 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.353686094 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.353909016 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.356108904 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.356129885 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:55.356250048 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:55.356271982 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.181283951 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.181907892 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.181937933 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.182396889 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.182404041 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.226902962 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.227277994 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.227449894 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.227471113 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.227693081 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.227710009 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.227897882 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.227902889 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.228136063 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.228141069 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.255992889 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.256542921 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.256561041 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.256966114 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.256973028 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.270294905 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.270744085 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.270765066 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.271152973 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.271159887 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.724211931 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.724289894 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.724349976 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.724550962 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.724571943 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.724589109 CET	49762	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.724596024 CET	443	49762	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.727529049 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.727572918 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.727827072 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.727827072 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.727859974 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.746808052 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.746870041 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.746956110 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.746968031 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.747041941 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.747097969 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.747097969 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.747097969 CET	49761	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.747123003 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.747133970 CET	443	49761	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.747225046 CET	49763	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.747230053 CET	443	49763	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.749737978 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.749774933 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.749855995 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.749927998 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.749967098 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.749974966 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.749986887 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.750015974 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.750189066 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.750201941 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.765543938 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.765618086 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.765685081 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.765800953 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.765800953 CET	49765	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.765816927 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.765825987 CET	443	49765	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.768122911 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.768163919 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.768224955 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.768379927 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.768395901 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.791878939 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.791948080 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.792016983 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.792201996 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.792201996 CET	49764	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.792218924 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.792237043 CET	443	49764	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.794677019 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.794713974 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:57.794986010 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.794986963 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:57.795049906 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:58.794544935 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:58.794632912 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:56:58.794739008 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:56:59.596812010 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.596947908 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.639360905 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.639364958 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.649853945 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.649868965 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.650352001 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.650357008 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.650938988 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.650949955 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.650981903 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.650986910 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.693847895 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.712954044 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.743393898 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.769877911 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.802248001 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.802258968 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.802726984 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.802732944 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.802980900 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.802995920 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.803344965 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.803350925 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.971440077 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.972553015 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.972579956 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:56:59.973004103 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:56:59.973011971 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.096661091 CET	49735	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:00.096688986 CET	443	49735	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:00.169534922 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.169615030 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.169675112 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.169891119 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.169912100 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.169924021 CET	49768	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.169930935 CET	443	49768	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.170557976 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.170646906 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.170689106 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.170763016 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.170777082 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.170800924 CET	49767	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.170806885 CET	443	49767	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.173687935 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.173751116 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.173815012 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.173856020 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.173863888 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.173872948 CET	49770	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.173877001 CET	443	49770	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.175359011 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.175400972 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.175463915 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.175729990 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.175749063 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.176084995 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.176126957 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.176187038 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.176297903 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.176312923 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.177027941 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.177057981 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.177124977 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.177264929 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.177284956 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.257271051 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.257373095 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.257457018 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.257654905 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.257671118 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.257683039 CET	49769	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.257688999 CET	443	49769	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.260695934 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.260735989 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.260808945 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.260971069 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.260984898 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.422317028 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.422394991 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.422455072 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.422696114 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.422708035 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.422739983 CET	49771	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.422745943 CET	443	49771	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.425554037 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.425575018 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.425648928 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.425873041 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:00.425888062 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:00.879781961 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.879884958 CET	443	49754	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:00.879966974 CET	49754	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.891972065 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.892010927 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:00.892077923 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.892225027 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.892271042 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:00.892326117 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.892868042 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.892879963 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:00.893112898 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:00.893134117 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.016752005 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.019521952 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.019553900 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.020261049 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.020267010 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.038604975 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.039150953 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.039185047 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.039923906 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.039932013 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.110351086 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.115660906 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.123349905 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.123383999 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.123929977 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.123938084 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.124253988 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.124295950 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.127053976 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.127075911 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.186953068 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.187611103 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.187655926 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.188173056 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.188179016 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.424535036 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.449315071 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.449347019 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.449908972 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.453408957 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.453495979 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.453553915 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.488215923 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.489929914 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.489964008 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.491151094 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.491214991 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.491544962 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.491602898 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.499326944 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.502754927 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.528594971 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.528671980 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.528743982 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.528992891 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.529012918 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.529025078 CET	49775	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.529031992 CET	443	49775	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.529757977 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.529824018 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.529881954 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.530776024 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.530796051 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.530818939 CET	49776	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.530823946 CET	443	49776	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.534133911 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.534169912 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.534231901 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.535114050 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.535160065 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.535212994 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.535465002 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.535475016 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.535554886 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.535573006 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.539011002 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.539025068 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:02.593251944 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:02.602385044 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.602478027 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.602536917 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.602696896 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.602722883 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.602741003 CET	49777	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.602747917 CET	443	49777	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.604614019 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.604687929 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.604954004 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.605102062 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.605102062 CET	49774	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.605128050 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.605133057 CET	443	49774	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.605902910 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.605946064 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.606056929 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.606486082 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.606498957 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.607716084 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.607752085 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.607815027 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.607959986 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.607976913 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.644263983 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.644336939 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.644530058 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.644571066 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.644592047 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.644606113 CET	49778	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.644612074 CET	443	49778	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.647353888 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.647388935 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:02.647584915 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.647787094 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:02.647799015 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:03.028626919 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:03.028645992 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:03.028707027 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:03.028718948 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:03.028733969 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:03.028804064 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:03.030762911 CET	49781	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:03.030781031 CET	443	49781	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:03.031519890 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:03.031594992 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:04.380640984 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.381314993 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.381355047 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.381943941 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.381959915 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.414820910 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.415388107 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.415429115 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.415858984 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.415865898 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.439893961 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.440392971 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.440422058 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.440817118 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.440821886 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.440907955 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.441170931 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.441184998 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.441513062 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.441518068 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.539539099 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.540162086 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.540184975 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.540566921 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.540572882 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.826241970 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.826318026 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.826493025 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.863866091 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.863943100 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.864003897 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.885708094 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.885780096 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.885833025 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:04.897030115 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.897104979 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:04.897166014 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.000726938 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.000726938 CET	49785	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.000771046 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.000782967 CET	443	49785	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.002572060 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.002593994 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.002625942 CET	49784	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.002633095 CET	443	49784	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.006494045 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.006506920 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.006520033 CET	49787	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.006527901 CET	443	49787	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.023411036 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.023437023 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.023565054 CET	49786	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.023572922 CET	443	49786	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.046401024 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.046479940 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.046883106 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.048614979 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.048655987 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.048712969 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.049052954 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.049052954 CET	49788	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.049074888 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.049087048 CET	443	49788	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.049678087 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.049694061 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.051240921 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.051270008 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.051331043 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.052421093 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.052443027 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.052496910 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.052660942 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.052670956 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.053066015 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.053092957 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.053153038 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.053235054 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.053257942 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.053339958 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.053349018 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.054208040 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.054248095 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:05.054320097 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.054483891 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:05.054514885 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.875037909 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.877465010 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.877492905 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.877968073 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.877974033 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.892400026 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.893068075 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.893101931 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.893460035 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.893466949 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.901767015 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.902076960 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.902116060 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.902432919 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.902441025 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.935005903 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.935528994 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.935549021 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.935887098 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.935903072 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.941253901 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.941627979 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.941643953 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:06.942039013 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:06.942044973 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.336556911 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.336631060 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.336846113 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.336895943 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.336895943 CET	49790	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.336914062 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.336922884 CET	443	49790	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.339518070 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.339560032 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.339667082 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.339835882 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.339850903 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.358968973 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.359050035 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.359124899 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.359611034 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.359644890 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.359747887 CET	49793	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.359760046 CET	443	49793	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.360023975 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.360097885 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.360670090 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.360704899 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.360714912 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.360726118 CET	49792	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.360733986 CET	443	49792	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.362298012 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.362349987 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.362437010 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.362552881 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.362569094 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.362596989 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.362638950 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.362709045 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.362854004 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.362870932 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.395133018 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.395205021 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.395443916 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.395473957 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.395473957 CET	49789	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.395490885 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.395499945 CET	443	49789	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.398168087 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.398199081 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.398300886 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.398480892 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.398494959 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.509418011 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.509517908 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.509749889 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.509749889 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.509804964 CET	49791	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.509820938 CET	443	49791	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.512557983 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.512603045 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.512721062 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.512873888 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:07.512885094 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:07.831487894 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:07.831533909 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:07.832094908 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:07.832256079 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:07.832264900 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:07.835097075 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:07.835153103 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:07.835235119 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:07.835753918 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:07.835767031 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:09.102585077 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.103250980 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.103274107 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.103709936 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.103717089 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.147690058 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.148228884 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.148258924 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.148736000 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.148745060 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.159883022 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.160274982 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.160295010 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.160684109 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.160700083 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.176434994 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.176830053 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.176848888 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.177205086 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.177217007 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.322587967 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.323163033 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.323206902 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.323623896 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.323637009 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.543100119 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.543190956 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.543257952 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.601706028 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.601783037 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.601867914 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.611103058 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.611169100 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.611242056 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.623166084 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.623244047 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.623323917 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.724489927 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.724514961 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.724529028 CET	49795	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.724536896 CET	443	49795	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.725390911 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.725435019 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.725537062 CET	49796	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.725547075 CET	443	49796	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.726653099 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.726680994 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.726695061 CET	49797	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.726701975 CET	443	49797	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.727525949 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.727526903 CET	49794	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.727552891 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.727566957 CET	443	49794	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.733694077 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.733726978 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.733787060 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.735359907 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.735390902 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.735460043 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.735750914 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.735764980 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.735820055 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.736423016 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.736440897 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.736455917 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.736498117 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.736555099 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.737564087 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.737577915 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.737750053 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.737770081 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.737840891 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.737858057 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.770705938 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.770780087 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.770916939 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.771528959 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.771528959 CET	49798	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.771549940 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.771559000 CET	443	49798	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.779769897 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.779809952 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.779884100 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.784403086 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:09.784424067 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:09.834645987 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.834984064 CET	443	49780	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:09.835057020 CET	49780	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.842797041 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.842845917 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:09.842947006 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.843023062 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.843070030 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:09.843126059 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.843466997 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.843485117 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:09.843631029 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:09.843648911 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:10.144232988 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.144331932 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.146601915 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.146611929 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.147146940 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.148515940 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.148592949 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.148598909 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.148730040 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.191334963 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.195470095 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.195544958 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.197446108 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.197453976 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.198000908 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.199693918 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.199754000 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.199760914 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.199871063 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.243343115 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.768603086 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.770015001 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.770024061 CET	443	49799	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.770045042 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.770093918 CET	49799	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.785732985 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.785864115 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:10.785934925 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.786009073 CET	49800	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:10.786030054 CET	443	49800	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:11.316991091 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.317287922 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.317323923 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.317692041 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.317990065 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.318115950 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.318119049 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.356384993 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.356698990 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.356745005 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.357892990 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.357973099 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.358288050 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.358355999 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.358407974 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.358443975 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.405256033 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.405288935 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.459748983 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.552963972 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.553577900 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.553620100 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.554080009 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.554086924 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.561872005 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.562458992 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.562504053 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.562810898 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.562828064 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.564925909 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.565196991 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.565239906 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.565540075 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.565548897 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.570406914 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.570652008 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.570686102 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.570997000 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:11.571003914 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.869318962 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.869390965 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.869426012 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.869469881 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.871613026 CET	49806	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.871634960 CET	443	49806	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.872507095 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:11.872577906 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:11.999147892 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.999232054 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:11.999366045 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.004331112 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.004347086 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.004379034 CET	49805	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.004386902 CET	443	49805	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.011002064 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.011061907 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.011166096 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.011990070 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.012029886 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.012206078 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.012216091 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.012248039 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.012269020 CET	49801	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.012274027 CET	443	49801	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.017718077 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.017788887 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.017877102 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.037067890 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.037087917 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.037107944 CET	49804	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.037113905 CET	443	49804	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.038970947 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.039006948 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.041884899 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.041923046 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.042179108 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.042953968 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.042995930 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.043051004 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.043210983 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.043222904 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.043385029 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.043401957 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.050292015 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.050362110 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.050434113 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.053153038 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.053153038 CET	49802	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.053168058 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.053178072 CET	443	49802	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.097470045 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.097506046 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.097606897 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.101428032 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:12.101444960 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:12.351965904 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:12.352046013 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:12.352099895 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:12.353885889 CET	49807	443	192.168.2.5	205.139.111.117
Nov 25, 2024 17:57:12.353909016 CET	443	49807	205.139.111.117	192.168.2.5
Nov 25, 2024 17:57:12.509056091 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:12.509099960 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:12.509177923 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:12.509404898 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:12.509423018 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:13.868196011 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.868745089 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.868778944 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.869215965 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.869221926 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.873629093 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.873903990 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.873924971 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.873943090 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.874185085 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.874202013 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.874255896 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.874264002 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.874893904 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.874913931 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.900362968 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.900847912 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.900882006 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:13.901333094 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:13.901338100 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.099503040 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.099740982 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.099759102 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.100831985 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.100897074 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.101802111 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.101871014 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.101933002 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.101943970 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.154481888 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.327382088 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.327548027 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.327630997 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.327665091 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.327733994 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.327780008 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.327780962 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.327791929 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.327805042 CET	49809	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.327810049 CET	443	49809	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.328142881 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.328161955 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.328175068 CET	49810	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.328180075 CET	443	49810	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.330797911 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.330847025 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.330913067 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.331191063 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.331202030 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.332104921 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.332139015 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.332200050 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.332309961 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.332326889 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.350495100 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.350569010 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.350641012 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.350780964 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.350811958 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.350830078 CET	49811	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.350836039 CET	443	49811	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.356230021 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.356286049 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.356348038 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.356410980 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.356455088 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.356508970 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.356566906 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.356590033 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.356602907 CET	49808	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.356609106 CET	443	49808	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.357475996 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.357503891 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.358927965 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.358969927 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.359020948 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.359160900 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.359175920 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.438107014 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.438134909 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.438205004 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.438334942 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.438334942 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.496802092 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.539138079 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.779833078 CET	49812	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.779865026 CET	443	49812	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.787787914 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.787817001 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.788343906 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:14.788350105 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:14.790060043 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.790105104 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.790179968 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.790777922 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.790817022 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.790885925 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791229963 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791239977 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.791296959 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791582108 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791623116 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.791673899 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791805029 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791819096 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.791961908 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.791979074 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.792092085 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.792099953 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:14.792222977 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:14.792239904 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:15.109841108 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:15.109932899 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:15.109987020 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:15.110773087 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:15.110795975 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:15.110801935 CET	49803	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:15.110809088 CET	443	49803	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:15.116491079 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:15.116529942 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:15.116856098 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:15.116856098 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:15.116888046 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.115010023 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.115238905 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.115258932 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.117095947 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.117175102 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.117582083 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.117695093 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.117733955 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.136447906 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.136818886 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.137661934 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.137697935 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.138240099 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.138247013 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.139193058 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.139225960 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.139986038 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.139991999 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.144032955 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.144431114 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.144452095 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.144928932 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.144934893 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.163326025 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.167081118 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.167088985 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.210149050 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.213009119 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.213718891 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.213749886 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.214082956 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.214090109 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.295373917 CET	49707	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:16.295542955 CET	49707	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:16.296132088 CET	49822	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:16.296159029 CET	443	49822	23.1.237.91	192.168.2.5
Nov 25, 2024 17:57:16.296235085 CET	49822	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:16.296686888 CET	49822	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:16.296701908 CET	443	49822	23.1.237.91	192.168.2.5
Nov 25, 2024 17:57:16.422699928 CET	443	49707	23.1.237.91	192.168.2.5
Nov 25, 2024 17:57:16.422729015 CET	443	49707	23.1.237.91	192.168.2.5
Nov 25, 2024 17:57:16.549860954 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.553951979 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.553977966 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.555233002 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.555325031 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.555742979 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.555836916 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.555895090 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.597150087 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.597174883 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.597270966 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.597286940 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.597444057 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.598079920 CET	49820	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.598098040 CET	443	49820	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.603338957 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.604027033 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.604088068 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.604693890 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.604748964 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.604748011 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.604785919 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.604830027 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.604886055 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.604898930 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.604907990 CET	49814	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.604913950 CET	443	49814	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.605976105 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.605994940 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.606035948 CET	49816	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.606043100 CET	443	49816	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.606694937 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.606709957 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.607085943 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.608596087 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.608633041 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.608720064 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.608771086 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.608800888 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.609019041 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.609086037 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.609088898 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.609617949 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.609625101 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.610317945 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.610335112 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.610348940 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.610524893 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.610539913 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.616224051 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.616281986 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.616352081 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.616487026 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.616501093 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.616512060 CET	49813	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.616518021 CET	443	49813	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.618427992 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.618458986 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.618529081 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.618639946 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.618650913 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.654781103 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.655349016 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.674940109 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.677983999 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.678037882 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.678442001 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.680042982 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.680120945 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.680191994 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.691266060 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.691332102 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.691417933 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.691622972 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.691632032 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.691637039 CET	49815	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.691642046 CET	443	49815	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.694020033 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.694048882 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.694123983 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.694264889 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.694279909 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.723334074 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.772793055 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.772824049 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.772984982 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.773142099 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.773155928 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.843331099 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.846134901 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.846169949 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.846713066 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:16.846719027 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:16.950664997 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.950685978 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.950699091 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.950726986 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.950736046 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.950747013 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.950983047 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.950983047 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:16.951006889 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:16.951060057 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.012907028 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.012940884 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.012957096 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.013066053 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.013078928 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.013123989 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.027371883 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.027471066 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.027564049 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.029184103 CET	49818	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.029206038 CET	443	49818	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.126069069 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.126085997 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.126121044 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.126166105 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.126188993 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.126220942 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.126247883 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.172302008 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.172327042 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.172413111 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.172430038 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.172451019 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.172477007 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.204823017 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.204859972 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.205044031 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.205044031 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.205054045 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.205096960 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.259881973 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.259913921 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.260118008 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.260129929 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.260171890 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.298044920 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.298074007 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.298122883 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.298135042 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.298177004 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.298192978 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.310616970 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:17.310699940 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:17.310801983 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:17.325086117 CET	49821	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:17.325109005 CET	443	49821	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:17.330301046 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:17.330347061 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:17.330454111 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:17.330646038 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:17.330661058 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:17.337860107 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.337877989 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.337934971 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.337954998 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.337985992 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.338010073 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.357980013 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.358051062 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.358061075 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.358082056 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.358133078 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.358469963 CET	49819	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.358484030 CET	443	49819	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.366687059 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.366728067 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.366812944 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.367105007 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.367116928 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.384957075 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.384988070 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.385024071 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.385035038 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.385070086 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.385093927 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.424799919 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.424830914 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.424871922 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.424896002 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.424922943 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.424937010 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.461349964 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.461388111 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.461422920 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.461447001 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.461493015 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.461493015 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.497778893 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.497806072 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.497855902 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.497873068 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.497906923 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.497927904 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.589808941 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.589831114 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.589878082 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.589900970 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.589935064 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.589951992 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.615904093 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.615928888 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.615967989 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.615982056 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.616023064 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.616040945 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.635488033 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.635504961 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.635554075 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.635565996 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.635617018 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.657533884 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.657556057 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.657588959 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.657601118 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.657632113 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.657649994 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.677243948 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.677268982 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.677333117 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.677345037 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.677381992 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.698808908 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.698827028 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.698884964 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.698913097 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.698962927 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.720429897 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.720449924 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.720504045 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.720514059 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.720577002 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.785495043 CET	443	49822	23.1.237.91	192.168.2.5
Nov 25, 2024 17:57:17.785572052 CET	49822	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:17.876646042 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.876672983 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.876720905 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.876733065 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.876775026 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.885885000 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.885904074 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.885947943 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.885957003 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.885987997 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.886008024 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.895087957 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.895107031 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.895164013 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.895172119 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.895211935 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.903408051 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.903428078 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.903466940 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.903476000 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.903513908 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.903531075 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.912414074 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.912435055 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.912492990 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.912530899 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.912583113 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.921665907 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.921690941 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.921731949 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.921740055 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.921780109 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.921797037 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.931083918 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.931107044 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.931153059 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.931162119 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.931194067 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.931215048 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.974663019 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.974687099 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.974725962 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.974737883 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.974786997 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.983222008 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.983242989 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.983294010 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.983303070 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.983345032 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.994632006 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.994653940 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.994697094 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:17.994704962 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:17.994745016 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.016602039 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.016627073 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.016679049 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.016685963 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.016721010 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.017944098 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.018037081 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.018110037 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.018203020 CET	49817	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.018215895 CET	443	49817	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.052561045 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.052602053 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.052695036 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.052886009 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.052901030 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.056685925 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.056754112 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.056834936 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.057027102 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.057043076 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.483287096 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.484184980 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.484206915 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.484735966 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.484747887 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.484926939 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.486495972 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.486515999 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.487188101 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.487195015 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.503148079 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.503525019 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.503545046 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.503947973 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.503954887 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.562901974 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.570089102 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.570108891 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.570637941 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.570643902 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.597688913 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.598022938 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.598033905 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.599343061 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.599503040 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.599852085 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.599920034 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.600033045 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.643337011 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.655694008 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.655702114 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.702811956 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.985651016 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.985668898 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.985728025 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.985732079 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.985824108 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.986536026 CET	49827	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:18.986550093 CET	443	49827	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:18.998847961 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.998965979 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.999027967 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.999183893 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.999191999 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:18.999206066 CET	49823	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:18.999211073 CET	443	49823	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.002108097 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.002175093 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.002281904 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.002473116 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.002489090 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.008371115 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.008444071 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.008582115 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.008582115 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.008625031 CET	49824	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.008642912 CET	443	49824	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.010791063 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.010819912 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.011008024 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.011173010 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.011183977 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.014678001 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.014753103 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.014862061 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.014903069 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.014903069 CET	49825	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.014924049 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.014935970 CET	443	49825	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.016927004 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.016958952 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.017144918 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.017276049 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.017292023 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.027636051 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.027708054 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.027865887 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.027890921 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.027899981 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.027916908 CET	49826	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.027921915 CET	443	49826	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.029953003 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.029974937 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.030061960 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.030181885 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.030194044 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.273768902 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.274276018 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.274296999 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.274751902 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.274758101 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.325293064 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.325611115 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.325623035 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.326823950 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.326977968 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.327317953 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.327392101 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.327390909 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.371349096 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.379544020 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.379556894 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.426440954 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.735224962 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735260010 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735270023 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735291958 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735299110 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735306025 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735342979 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.735352993 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.735421896 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.744381905 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.744456053 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.744529009 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.749978065 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.749995947 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.750008106 CET	49828	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.750015020 CET	443	49828	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.783566952 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.783597946 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.783849001 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.785485983 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:19.785500050 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:19.901324987 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.901627064 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.901653051 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.902035952 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.902339935 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.902431965 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.902496099 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.919331074 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.919617891 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.919627905 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.920716047 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.920805931 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.921109915 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.921175003 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.921283007 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.921293020 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.943331003 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.950036049 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.950048923 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.950078964 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.950104952 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.950145960 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.950310946 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.950314999 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:19.952616930 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:19.973604918 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.005477905 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.005517960 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.005646944 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.005646944 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.005655050 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.005740881 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.140646935 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.140678883 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.140759945 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.140767097 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.140799046 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.140839100 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.179065943 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.179106951 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.179158926 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.179167032 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.179224014 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.203274965 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.203340054 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.203353882 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.203357935 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.203382969 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.203397989 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.203450918 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.203586102 CET	49829	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.203597069 CET	443	49829	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.239419937 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.239516973 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.239703894 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.241811991 CET	49830	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.241827011 CET	443	49830	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.246217966 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.246260881 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.246330976 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.246536970 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.246551037 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309801102 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309834957 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309843063 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309870958 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309884071 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309895992 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309899092 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.309917927 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.309953928 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.309978008 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.506674051 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.506704092 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.506762028 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.506772995 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.506819010 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.506819963 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.567388058 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.567418098 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.567514896 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.567528963 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.567619085 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.689069986 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.689100981 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.689224958 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.689239025 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.689737082 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.735515118 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.735541105 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.735641003 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.735654116 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.736223936 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.759767056 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.759787083 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.759953976 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.759968996 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.760323048 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.764770031 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.765392065 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.765402079 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.765847921 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.765855074 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.781119108 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.781137943 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.781203032 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.781213999 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.781598091 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.803575039 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.804111958 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.804138899 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.804557085 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.804563999 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.887176991 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.887197971 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.887300968 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.887314081 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.887789965 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.899168968 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.899667978 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.899681091 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.900114059 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.900120974 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.902714968 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.902956009 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.902975082 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.903274059 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:20.903279066 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:20.908390045 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.908410072 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.908478022 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.908485889 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.909349918 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.927247047 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.927264929 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.927345037 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.927354097 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.927788019 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.943171024 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.943185091 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.943274975 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.943281889 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.943804026 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.961215973 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.961246967 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.961296082 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.961302042 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.961358070 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.961358070 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.974030018 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.974051952 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.974143028 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.974152088 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.974205971 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.988584995 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.988612890 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.988677025 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:20.988686085 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:20.989095926 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.085995913 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.086021900 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.086107969 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.086122990 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.086652040 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.097470999 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.097490072 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.097742081 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.097749949 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.097857952 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.108514071 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.108536005 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.108624935 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.108624935 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.108633995 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.109740019 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.118822098 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.118839979 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.118952036 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.118959904 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.119164944 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.127449989 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.127470016 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.127583027 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.127589941 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.127664089 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.138010025 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.138029099 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.138127089 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.138134003 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.138339043 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.146737099 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.146754026 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.146850109 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.146857023 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.146971941 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.156658888 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.156677961 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.156768084 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.156776905 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.156831026 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.267111063 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.267185926 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.267260075 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.267425060 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.267425060 CET	49835	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.267437935 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.267446995 CET	443	49835	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.270314932 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.270361900 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.270432949 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.270642996 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.270654917 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.283498049 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.283561945 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.283615112 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.283864021 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.283880949 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.283893108 CET	49834	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.283899069 CET	443	49834	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.286055088 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.286081076 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.286151886 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.286273956 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.286286116 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.287904024 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.287931919 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.288009882 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.288021088 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.288065910 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.295202971 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.295224905 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.295331955 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.295341969 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.295387983 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.304146051 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.304164886 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.304224968 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.304234982 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.304277897 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.304277897 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.305356026 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.305454016 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.305526972 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.305562973 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.305573940 CET	443	49831	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:21.305613995 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.305613995 CET	49831	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:21.409610987 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.409682035 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.409751892 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.409961939 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.409981012 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.409993887 CET	49832	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.410000086 CET	443	49832	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.412933111 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.412970066 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.413069963 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.413244963 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.413256884 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.687824011 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.688426018 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.688443899 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:21.688873053 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:21.688878059 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.060096979 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.060539961 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:22.060559034 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.060921907 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.061211109 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:22.061274052 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.061374903 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:22.107333899 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.345726013 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.345902920 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.345982075 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:22.346206903 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:22.346215963 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.346229076 CET	49836	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:22.346235037 CET	443	49836	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.355426073 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:22.355459929 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.355523109 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:22.355783939 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:22.355797052 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:22.441576958 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.441663027 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:22.441718102 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:22.442787886 CET	49837	443	192.168.2.5	170.10.128.88
Nov 25, 2024 17:57:22.442797899 CET	443	49837	170.10.128.88	192.168.2.5
Nov 25, 2024 17:57:23.238354921 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.238914967 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.238925934 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.239449024 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.239454031 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.243926048 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.244209051 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.244232893 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.244554996 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.244563103 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.319952011 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.320230961 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.320316076 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.320404053 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.320405006 CET	49833	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.320422888 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.320440054 CET	443	49833	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.323203087 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.323246002 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.323342085 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.323537111 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.323545933 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.349715948 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.350178957 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.350194931 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.350639105 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.350651979 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.954451084 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.954513073 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.954579115 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.954797029 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.954809904 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.954857111 CET	49840	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.954864025 CET	443	49840	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.956072092 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.956135035 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.956186056 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.956299067 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.956299067 CET	49838	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.956317902 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.956326962 CET	443	49838	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.957756996 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.957787991 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.957861900 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.958012104 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.958020926 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.958703041 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.958728075 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.958803892 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.958889961 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.958898067 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.959366083 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.959388018 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.959440947 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.959451914 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.959566116 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.959598064 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.959598064 CET	49839	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.959605932 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.959614038 CET	443	49839	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.961690903 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.961715937 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:23.961791039 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.961932898 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:23.961951017 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:24.527182102 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:24.527666092 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:24.527686119 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:24.528228045 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:24.528234005 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.010274887 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.010360003 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.010446072 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.010587931 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.010612965 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.010620117 CET	49841	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.010626078 CET	443	49841	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.013672113 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.013699055 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.013832092 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.013963938 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.013973951 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.086877108 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.087419987 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.087446928 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.087901115 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.087908030 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.539719105 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.539746046 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.539845943 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.539856911 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.540221930 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.540221930 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.540236950 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.540381908 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.540411949 CET	443	49842	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.540493965 CET	49842	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.543028116 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.543071985 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.543159962 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.543317080 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.543329000 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.900667906 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.902225971 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.902236938 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.902666092 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.902669907 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.939603090 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.942389011 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.942406893 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.942838907 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.942850113 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.960098028 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.962310076 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.962327003 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:25.962781906 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:25.962790012 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.358736992 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.358764887 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.358946085 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.358956099 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.359297037 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.359297037 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.359311104 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.359493017 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.359530926 CET	443	49844	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.359580040 CET	49844	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.362416029 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.362473965 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.362567902 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.362736940 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.362755060 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.393224001 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.398962975 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.399024010 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.399122953 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.399122953 CET	49845	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.399147987 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.399158001 CET	443	49845	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.401595116 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.401658058 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.401726961 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.401851892 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.401878119 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.479213953 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.479234934 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.479331017 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.479360104 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.479434967 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.479645967 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.479651928 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.479671001 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.479810953 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.479836941 CET	443	49843	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.480139971 CET	49843	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.482356071 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.482402086 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.482611895 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.482778072 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.482795000 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.866254091 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:26.866308928 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:26.866420031 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:26.866859913 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:26.866874933 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:26.928638935 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.929285049 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.929305077 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:26.929749966 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:26.929755926 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.399682045 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.399759054 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.399816990 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.399976969 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.399976969 CET	49846	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.399991989 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.399998903 CET	443	49846	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.403232098 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.403280973 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.403350115 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.403542995 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.403573036 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.439627886 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.440305948 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.440325022 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.440716982 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.440723896 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.984571934 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.984673023 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.984771967 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.984941006 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.984941006 CET	49847	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.984962940 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.984985113 CET	443	49847	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.987937927 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.987979889 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:27.988064051 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.988224030 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:27.988240957 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.156953096 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.157674074 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.157706022 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.158232927 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.158241034 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.255073071 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.255738020 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.255775928 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.256391048 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.256397009 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.296349049 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.296936989 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.296964884 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.297398090 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.297406912 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.652128935 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.655251980 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.655329943 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.655386925 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.655386925 CET	49848	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.655405045 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.655416012 CET	443	49848	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.658314943 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.658341885 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.658410072 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.658539057 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.658550978 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.663636923 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:28.663707972 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:28.664885044 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:28.664890051 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:28.665122986 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:28.666522026 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:28.704281092 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.707294941 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.707372904 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.707416058 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.707425117 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.707437992 CET	49850	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.707443953 CET	443	49850	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.710230112 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.710278988 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.710350990 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.710509062 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.710522890 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.711321115 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:28.795639038 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.799448967 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.799536943 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.799593925 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.799612045 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.799623013 CET	49849	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.799628973 CET	443	49849	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.802274942 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.802328110 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:28.802428007 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.802606106 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:28.802618027 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:29.382539988 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.382569075 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.382584095 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.382705927 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.382725954 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.382740974 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.382761955 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.418919086 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.418984890 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.419039011 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.419054031 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.419084072 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.419104099 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.419265985 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.419280052 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.419296980 CET	49851	443	192.168.2.5	52.149.20.212
Nov 25, 2024 17:57:29.419303894 CET	443	49851	52.149.20.212	192.168.2.5
Nov 25, 2024 17:57:29.559905052 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:29.571785927 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:29.571810007 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:29.572381020 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:29.572386980 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:29.922100067 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:29.922602892 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:29.922636032 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:29.923062086 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:29.923069954 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.052846909 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.056329012 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.056400061 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.056473017 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.056479931 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.056493044 CET	49852	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.056497097 CET	443	49852	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.059226036 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.059237957 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.059293985 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.059431076 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.059438944 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.550704956 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.555656910 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.555732012 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.555763960 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.555787086 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.555799007 CET	49853	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.555805922 CET	443	49853	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.558480024 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.558510065 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.558579922 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.558762074 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.558775902 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.592336893 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.592767954 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.592787981 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.593369007 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.593378067 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.595442057 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.595989943 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.596019030 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.596396923 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.596404076 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.721483946 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.722018957 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.722038984 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:30.722484112 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:30.722489119 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.105205059 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.108889103 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.108977079 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.109049082 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.109071016 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.109083891 CET	49854	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.109090090 CET	443	49854	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.111788034 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.111819983 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.111884117 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.112021923 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.112031937 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.128576994 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.131800890 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.131858110 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.131890059 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.131910086 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.131922007 CET	49855	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.131928921 CET	443	49855	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.134589911 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.134637117 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.134712934 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.134865046 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.134884119 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.226066113 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.233374119 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.233423948 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.233477116 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.233509064 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.233947039 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.233961105 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.233973980 CET	49856	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.233978987 CET	443	49856	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.237349987 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.237386942 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.237446070 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.237751961 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:31.237766027 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:31.239286900 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:31.239305973 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:31.239355087 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:31.240015984 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:31.240030050 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:31.244565010 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:31.244599104 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:31.244702101 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:31.245474100 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:31.245486021 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:32.030903101 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.031478882 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.031511068 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.031987906 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.031994104 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.372476101 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.372977018 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.372997046 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.373451948 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.373459101 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.614609003 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.614696026 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.614761114 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.614928961 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.614948034 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.614958048 CET	49857	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.614964962 CET	443	49857	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.617588043 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.617624044 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.617696047 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.617826939 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.617842913 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.826272011 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.826987982 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.827018023 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.827455997 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.827462912 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.837639093 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.837677956 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.837735891 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.837738037 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.837781906 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.838038921 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.838054895 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.838076115 CET	49858	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.838082075 CET	443	49858	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.840851068 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.840883970 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.840971947 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.841169119 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.841181993 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.941700935 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.942235947 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.942254066 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:32.942739010 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:32.942745924 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.073112965 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.073772907 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.073807955 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.074244976 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.074256897 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.280457020 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.284662962 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.284739017 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.284787893 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.284806967 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.284822941 CET	49860	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.284828901 CET	443	49860	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.287566900 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.287606001 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.287687063 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.287834883 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.287849903 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.391168118 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.394397020 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.394496918 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.394535065 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.394556046 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.394563913 CET	49859	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.394571066 CET	443	49859	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.397455931 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.397492886 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.397747993 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.397747993 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.397789001 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.509244919 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.509392023 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.511224985 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.511240005 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.511497974 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.512783051 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.512860060 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.512867928 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.512953997 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.520697117 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.524190903 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.524281025 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.524318933 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.524338007 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.524350882 CET	49861	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.524357080 CET	443	49861	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.526964903 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.527007103 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.527081013 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.527204990 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:33.527220964 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:33.529408932 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.529495001 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.531100988 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.531112909 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.531917095 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.533466101 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.533531904 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.533540010 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.533670902 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:33.559344053 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:33.579338074 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.080900908 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.081417084 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.081490040 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:34.081671953 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:34.081695080 CET	443	49863	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.081706047 CET	49863	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:34.180035114 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.180130959 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.180207968 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:34.180447102 CET	49862	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:34.180471897 CET	443	49862	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:34.344378948 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.345127106 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.345144033 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.345590115 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.345601082 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.688582897 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.689156055 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.689176083 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.689625978 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.689630985 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.786544085 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.791152000 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.791208982 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.791325092 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.791373014 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.791393995 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.791408062 CET	49864	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.791414022 CET	443	49864	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.794219971 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.794275045 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:34.794415951 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.794570923 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:34.794581890 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.105195999 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.106103897 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.106131077 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.106448889 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.106460094 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.160052061 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.165518045 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.165638924 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.165764093 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.165764093 CET	49865	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.165781975 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.165790081 CET	443	49865	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.168919086 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.168972969 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.169050932 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.169218063 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.169230938 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.271166086 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.272322893 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.272322893 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.272340059 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.272351980 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.351849079 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.352313995 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.352334023 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.352826118 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.352832079 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.561496973 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.566359997 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.566420078 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.566504002 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.566519976 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.566536903 CET	49866	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.566544056 CET	443	49866	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.569277048 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.569310904 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.569361925 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.569560051 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.569570065 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.885189056 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.885243893 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.885322094 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.885344028 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.885381937 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.885631084 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.885654926 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.885667086 CET	49868	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.885673046 CET	443	49868	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.889112949 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.889158964 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.889281034 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.889439106 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.889456987 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.925695896 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.926026106 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.926107883 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.926137924 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.926137924 CET	49867	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.926151037 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.926158905 CET	443	49867	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.928961039 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.929012060 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:35.929090023 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.929272890 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:35.929289103 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:36.630296946 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:36.631150007 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:36.631170034 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:36.631681919 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:36.631686926 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:36.859287977 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:36.859854937 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:36.859901905 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:36.860343933 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:36.860357046 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.080215931 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.083828926 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.083909988 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.083973885 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.083988905 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.084100008 CET	49869	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.084106922 CET	443	49869	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.086782932 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.086817980 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.086883068 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.087024927 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.087034941 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.181483030 CET	443	49822	23.1.237.91	192.168.2.5
Nov 25, 2024 17:57:37.181602001 CET	49822	443	192.168.2.5	23.1.237.91
Nov 25, 2024 17:57:37.300587893 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.305237055 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.305285931 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.305296898 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.305352926 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.305396080 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.305417061 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.305430889 CET	49870	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.305437088 CET	443	49870	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.308198929 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.308250904 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.308322906 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.308485031 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.308496952 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.424930096 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.425496101 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.425508022 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.425961018 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.425965071 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.743339062 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.743398905 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.743927002 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.743931055 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.743938923 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.743947029 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.744364023 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.744371891 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:37.744560957 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:37.744566917 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.187356949 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.187419891 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.187500954 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.187750101 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.187750101 CET	49871	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.187764883 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.187773943 CET	443	49871	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.190860033 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.190888882 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.190984011 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.191171885 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.191181898 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.452315092 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.455507994 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.455583096 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.455732107 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.455732107 CET	49872	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.455758095 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.455769062 CET	443	49872	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.458832026 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.458893061 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.458965063 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.459134102 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.459150076 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.475994110 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.479737997 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.479860067 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.479897022 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.479916096 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.479932070 CET	49873	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.479938984 CET	443	49873	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.482829094 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.482882023 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.482956886 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.483181000 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.483196020 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.827816010 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.828254938 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.828273058 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:38.829714060 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:38.829729080 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.101059914 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.101917982 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.101933956 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.102386951 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.102392912 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.333941936 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.336996078 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.337074995 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.337081909 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.337141037 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.337233067 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.337254047 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.337265015 CET	49874	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.337271929 CET	443	49874	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.339982033 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.340014935 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.340090990 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.340229988 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.340244055 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.654455900 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.657309055 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.657403946 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.657448053 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.657478094 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.657490015 CET	49875	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.657495975 CET	443	49875	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.660870075 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.660929918 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:39.661000967 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.661178112 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:39.661197901 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.147910118 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.148473978 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.148489952 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.148951054 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.148957968 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.249527931 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.250178099 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.250228882 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.250644922 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.250653982 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.291939020 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.292563915 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.292577982 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.293042898 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.293055058 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.615895987 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.619306087 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.619453907 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.619517088 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.619537115 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.619560957 CET	49876	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.619569063 CET	443	49876	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.622963905 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.623006105 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.623130083 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.623332977 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.623347044 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.708189964 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.711368084 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.711467028 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.711509943 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.711533070 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.711543083 CET	49877	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.711550951 CET	443	49877	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.714680910 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.714790106 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.714896917 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.715076923 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.715115070 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.743923903 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.748204947 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.748267889 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.748327971 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.748342991 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.748408079 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.748425007 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.748457909 CET	49878	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.748466969 CET	443	49878	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.751363993 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.751414061 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:40.751519918 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.751705885 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:40.751715899 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.140376091 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.140918970 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.140952110 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.141397953 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.141403913 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.254250050 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.254956007 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.254995108 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.255327940 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.255337954 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.586873055 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.590698004 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.590778112 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.590831041 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.590831041 CET	49879	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.590852976 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.590867043 CET	443	49879	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.593832016 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.593903065 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.593977928 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.594155073 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.594201088 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.699423075 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.703221083 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.703290939 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.703366995 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.703393936 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.703411102 CET	49880	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.703419924 CET	443	49880	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.706309080 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.706370115 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:41.706443071 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.706625938 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:41.706641912 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.487710953 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.488398075 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.488442898 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.489208937 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.489224911 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.489401102 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.489742994 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.489764929 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.490138054 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.490144968 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.554507971 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.554840088 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.554864883 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.555247068 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.555255890 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.961950064 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.965125084 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.965204954 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.965240002 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.965256929 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.965267897 CET	49881	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.965276957 CET	443	49881	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.968219995 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.968291044 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:42.968380928 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.968537092 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:42.968554020 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.006268978 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.009825945 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.009907007 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.009946108 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.009954929 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.009969950 CET	49883	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.009975910 CET	443	49883	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.012773037 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.012811899 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.012969971 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.013097048 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.013108969 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.089987040 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.093353987 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.093422890 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.093451023 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.093523026 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.093569040 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.093569994 CET	49882	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.093616962 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.093650103 CET	443	49882	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.096848011 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.096890926 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.096971989 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.097121000 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.097135067 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.393194914 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.393794060 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.393846035 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.394278049 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.394285917 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.493416071 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.494012117 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.494045973 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.494560003 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.494566917 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.839054108 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.842279911 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.842391014 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.842443943 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.842477083 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.842498064 CET	49884	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.842505932 CET	443	49884	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.845328093 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.845367908 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.845432997 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.845590115 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.845601082 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.938625097 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.941823006 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.941910982 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.941952944 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.941972017 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.941982031 CET	49885	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.941987991 CET	443	49885	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.945266008 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.945318937 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:43.945450068 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.945570946 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:43.945588112 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.743107080 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.743717909 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:44.743740082 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.744153023 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:44.744162083 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.762005091 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.762456894 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:44.762487888 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.762945890 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:44.762953997 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.986917973 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.987494946 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:44.987526894 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:44.988450050 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:44.988457918 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.184099913 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.185750008 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.185880899 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.185942888 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.185942888 CET	49888	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.185964108 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.185973883 CET	443	49888	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.189701080 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.189752102 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.189968109 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.190026999 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.190037966 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.217252016 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.220377922 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.220422983 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.220484972 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.220617056 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.220767021 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.220798016 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.220828056 CET	49887	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.220839024 CET	443	49887	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.223627090 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.223673105 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.223741055 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.223869085 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.223885059 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.441179037 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.441308022 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.441368103 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.441474915 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.441839933 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.441839933 CET	49889	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.441863060 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.441874027 CET	443	49889	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.444888115 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.444931030 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.445136070 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.445211887 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.445223093 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.575551987 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.576114893 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.576138020 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.576618910 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.576626062 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.801708937 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.802771091 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.802799940 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:45.803301096 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:45.803316116 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.011382103 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.014652967 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.014808893 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.014894962 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.014913082 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.014935017 CET	49890	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.014940977 CET	443	49890	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.018237114 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.018299103 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.018381119 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.018521070 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.018531084 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.438170910 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.438199997 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.438258886 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.438272953 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.438344002 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.450547934 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.450589895 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.450603962 CET	49891	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.450611115 CET	443	49891	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.455543041 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.455594063 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.455646038 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.455923080 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.455938101 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.983956099 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.984570980 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.984599113 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:46.985027075 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:46.985033035 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.087021112 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.087655067 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.087691069 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.088181019 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.088187933 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.169101000 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.169883966 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.169914007 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.170389891 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.170397997 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.282731056 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:47.282782078 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:47.282949924 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:47.283210993 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:47.283229113 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:47.470613956 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.470941067 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.471016884 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.471060038 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.471080065 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.471091032 CET	49892	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.471098900 CET	443	49892	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.473961115 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.474000931 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.474081039 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.474224091 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.474237919 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.547292948 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.550661087 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.550745964 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.550753117 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.550841093 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.550898075 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.550928116 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.550940990 CET	49893	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.550946951 CET	443	49893	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.554011106 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.554054976 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.554121971 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.554266930 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.554284096 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.622220039 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.625349998 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.625422001 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.625504017 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.625504017 CET	49894	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.625529051 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.625540972 CET	443	49894	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.628454924 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.628529072 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.628602982 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.628772020 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.628793001 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.811764002 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.812230110 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.812262058 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:47.812688112 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:47.812695980 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.268002987 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.271249056 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.271305084 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.271352053 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.271384001 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.271440983 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.271461964 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.271476030 CET	49895	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.271481991 CET	443	49895	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.274522066 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.274574041 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.274679899 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.274856091 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.274871111 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.318809986 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.319667101 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.319696903 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.320136070 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.320141077 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.782447100 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.786025047 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.786098003 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.786145926 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.786165953 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.786179066 CET	49896	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.786185980 CET	443	49896	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.788966894 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.789068937 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:48.789165020 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.789336920 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:48.789372921 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.037868977 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:49.042361975 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:49.042377949 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:49.042889118 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:49.046317101 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:49.046484947 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:49.093036890 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:49.302054882 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.302660942 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.302691936 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.303148031 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.303157091 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.351186991 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.351864100 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.351927042 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.352318048 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.352335930 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.518245935 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.519093990 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.519141912 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.522933960 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.522943974 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.757318974 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.757502079 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.757596970 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.757711887 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.757736921 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.757752895 CET	49898	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.757757902 CET	443	49898	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.760785103 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.760843039 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.760941982 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.761101961 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.761118889 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.809458017 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.809525967 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.809601068 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.809792042 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.809823036 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.809839964 CET	49899	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.809848070 CET	443	49899	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.812659979 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.812709093 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.812793970 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.813002110 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.813019037 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.983834028 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.987612963 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.987667084 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.987689018 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.987740993 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.987771988 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.987797976 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.987817049 CET	49900	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.987823963 CET	443	49900	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.990478039 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.990514994 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:49.990677118 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.990807056 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:49.990822077 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.081296921 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.081919909 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.081955910 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.082389116 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.082395077 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.547530890 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.547607899 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.547671080 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.547821045 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.547847033 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.547862053 CET	49901	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.547871113 CET	443	49901	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.550518036 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.550554037 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.550621033 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.550754070 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.550760031 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.769959927 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.770751953 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.770785093 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:50.771234989 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:50.771240950 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.232953072 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.236177921 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.236224890 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.236272097 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.236327887 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.236366987 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.236387968 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.236398935 CET	49902	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.236404896 CET	443	49902	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.238976002 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.239020109 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.239123106 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.239295959 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.239308119 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.644920111 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.645428896 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.645461082 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.646008015 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.646013975 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.743031025 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.743560076 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.743596077 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.744066954 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.744072914 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.821396112 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.821970940 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.821990013 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:51.822460890 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:51.822468042 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.098984957 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.102143049 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.102224112 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.102278948 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.102294922 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.102312088 CET	49904	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.102318048 CET	443	49904	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.104984999 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.105050087 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.105127096 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.105266094 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.105277061 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.236896038 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.240046978 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.240113974 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.240181923 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.240209103 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.240220070 CET	49903	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.240226984 CET	443	49903	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.242989063 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.243046045 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.243778944 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.243944883 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.243962049 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.338212013 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.338891029 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.338908911 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.339353085 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.339358091 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.419352055 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.422508001 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.422616005 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.422650099 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.422669888 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.422681093 CET	49905	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.422689915 CET	443	49905	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.425509930 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.425571918 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.425658941 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.425820112 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.425836086 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.823637009 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.826668978 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.826730013 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.826750994 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.826808929 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.826896906 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.826911926 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.826921940 CET	49906	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.826927900 CET	443	49906	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.830339909 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.830391884 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:52.830465078 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.830671072 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:52.830686092 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.070233107 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.070846081 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.070875883 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.071336031 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.071345091 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.521605015 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.525166035 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.525257111 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.525300026 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.525315046 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.525331020 CET	49907	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.525337934 CET	443	49907	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.528345108 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.528399944 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:53.528520107 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.528683901 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:53.528702974 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.011859894 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.012480021 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.012518883 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.013115883 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.013125896 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.054743052 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.055399895 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.055440903 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.055856943 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.055866003 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.322814941 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.323503971 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.323546886 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.323997021 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.324002981 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.465867996 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.469367981 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.469427109 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.469424963 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.469494104 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.469597101 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.469624043 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.469635963 CET	49908	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.469641924 CET	443	49908	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.472981930 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.473027945 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.473124027 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.473429918 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.473443985 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.493269920 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.496371031 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.496448994 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.496498108 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.496519089 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.496531010 CET	49909	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.496537924 CET	443	49909	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.499639034 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.499679089 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.499922037 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.499922037 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.499953032 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.806674957 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.809766054 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.809842110 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.809963942 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.809993982 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.810009956 CET	49910	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.810017109 CET	443	49910	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.813139915 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.813189030 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.813273907 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.813405037 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.813417912 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.874890089 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.875422955 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.875458956 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:54.876105070 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:54.876111031 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.321150064 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.324381113 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.324532986 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.324583054 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.324610949 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.324626923 CET	49911	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.324634075 CET	443	49911	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.327950954 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.327990055 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.328068972 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.328284979 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.328296900 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.381117105 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.388679981 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.388696909 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.389307022 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.389314890 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.836700916 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.839977026 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.840084076 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.840177059 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.840177059 CET	49912	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.840198994 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.840209961 CET	443	49912	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.843597889 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.843648911 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:55.843760967 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.843923092 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:55.843939066 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.018215895 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:56.018251896 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:56.018399954 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:56.019134045 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:56.019148111 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:56.022785902 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:56.022841930 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:56.022950888 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:56.023515940 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:56.023530006 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:56.303015947 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.303658009 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.303679943 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.304112911 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.304126024 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.341191053 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.341667891 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.341684103 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.342051029 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.342055082 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.664822102 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.669218063 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.669229031 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.670384884 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.670391083 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.750624895 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.754018068 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.754169941 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.757652044 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.757652044 CET	49914	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.757677078 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.757688999 CET	443	49914	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.760320902 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.760360003 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.760437012 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.760670900 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.760684967 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.798439980 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.801510096 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.801767111 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.801800966 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.801815987 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.801827908 CET	49913	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.801832914 CET	443	49913	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.804896116 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.804935932 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:56.805027962 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.805188894 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:56.805205107 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.094326973 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.094801903 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.094827890 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.095249891 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.095256090 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.125585079 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.128417969 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.128496885 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.128556013 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.128568888 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.128582954 CET	49915	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.128588915 CET	443	49915	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.131701946 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.131742954 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.131818056 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.132006884 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.132019997 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.561677933 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.561724901 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.561779976 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.561784983 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.561830997 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.562016964 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.562051058 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.562062979 CET	49916	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.562069893 CET	443	49916	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.566308975 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.566426039 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.566515923 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.566752911 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.566791058 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.649081945 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.649558067 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.649574041 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:57.650007010 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:57.650011063 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.202415943 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.205544949 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.205632925 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.205670118 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.205670118 CET	49917	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.205688953 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.205699921 CET	443	49917	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.208642960 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.208695889 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.208787918 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.208961010 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.208975077 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.318876982 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.318979025 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.320797920 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.320805073 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.321044922 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.322396040 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.322452068 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.322457075 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.322520971 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.353364944 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.353446960 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.355070114 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.355083942 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.355333090 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.356884956 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.356939077 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.356945992 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.357075930 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.367335081 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.403323889 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.549354076 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.550067902 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.550087929 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.550537109 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.550544024 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.594013929 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.594682932 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.594703913 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.595124960 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.595130920 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.752103090 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:58.752177000 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:57:58.752362967 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:57:58.877214909 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.877370119 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.877813101 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.877813101 CET	49918	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.877842903 CET	443	49918	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.928807020 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.928988934 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.929341078 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.929385900 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.929399967 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.929399967 CET	49919	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:57:58.929409027 CET	443	49919	20.198.118.190	192.168.2.5
Nov 25, 2024 17:57:58.994972944 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.998682976 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.998759031 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.998825073 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.998838902 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:58.998856068 CET	49920	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:58.998861074 CET	443	49920	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.001796961 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.001847982 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.001955986 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.002125978 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.002142906 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.002250910 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.002600908 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.002612114 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.003036022 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.003041983 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.040533066 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.043688059 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.043756008 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.043798923 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.043798923 CET	49921	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.043817043 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.043827057 CET	443	49921	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.046222925 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.046286106 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.046370029 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.046511889 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.046529055 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.414819002 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.415383101 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.415395021 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.415848970 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.415854931 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531008005 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531032085 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531156063 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.531174898 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531487942 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.531496048 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531512976 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.531675100 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531708002 CET	443	49922	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.531745911 CET	49922	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.534236908 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.534307957 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.534378052 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.534521103 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.534538984 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.866523027 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.869518995 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.869580030 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.869719982 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.869811058 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.869832039 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.869849920 CET	49923	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.869857073 CET	443	49923	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.872936010 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.872973919 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:57:59.873126984 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.873238087 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:57:59.873260975 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.063999891 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.064604044 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.064634085 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.065047026 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.065052986 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.095310926 CET	49897	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:00.095339060 CET	443	49897	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:00.518090010 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.521883011 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.521930933 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.521938086 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.522015095 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.522109985 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.522131920 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.522140980 CET	49924	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.522146940 CET	443	49924	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.526109934 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.526148081 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.526240110 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.526361942 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.526374102 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.846411943 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.846909046 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.846987963 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:00.847352028 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:00.847372055 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.059685946 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.060574055 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.060610056 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.061177015 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.061182976 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.295557022 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.299820900 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.299918890 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.300008059 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.300008059 CET	49925	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.300050020 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.300076008 CET	443	49925	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.302782059 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.302822113 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.302980900 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.303147078 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.303157091 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.329974890 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.330425024 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.330462933 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.330857038 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.330871105 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.518151045 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.519001961 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.519056082 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.519071102 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.519109011 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.519157887 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.519179106 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.519190073 CET	49926	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.519197941 CET	443	49926	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.521905899 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.521943092 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.522074938 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.522219896 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.522236109 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.670468092 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.671226025 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.671237946 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.671675920 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.671681881 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.783420086 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.786537886 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.786624908 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.786694050 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.786732912 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.786761045 CET	49927	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.786777020 CET	443	49927	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.789465904 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.789514065 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:01.789598942 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.789761066 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:01.789776087 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.160692930 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.160717964 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.160890102 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.160916090 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.161163092 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.161164045 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.161175966 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.161375046 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.161403894 CET	443	49928	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.161458969 CET	49928	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.163913965 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.163949966 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.164026976 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.164160013 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.164175987 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.334156036 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.334743977 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.334758043 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.335246086 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.335251093 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.780443907 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.783374071 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.783427000 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.783484936 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.783484936 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.783567905 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.783567905 CET	49929	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.783586025 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.783595085 CET	443	49929	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.786282063 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.786334991 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:02.786407948 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.786540985 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:02.786552906 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.090373993 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.090940952 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.090959072 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.091403008 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.091408968 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.310488939 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.311042070 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.311058998 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.311492920 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.311496973 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.544475079 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.547676086 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.547818899 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.547849894 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.547954082 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.548122883 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.548122883 CET	49930	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.548151016 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.548161030 CET	443	49930	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.552856922 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.552907944 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.553005934 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.553205013 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.553229094 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.755875111 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.759306908 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.759490967 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.759490967 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.759490967 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.763514042 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.763551950 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:03.763699055 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.764096022 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:03.764110088 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.044167995 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.044949055 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.044967890 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.045759916 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.045768976 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.062288046 CET	49931	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.062309980 CET	443	49931	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.109668970 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.110239983 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.110269070 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.110965967 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.110977888 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.503647089 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.506876945 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.506962061 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.507245064 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.507272005 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.507292032 CET	49933	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.507322073 CET	443	49933	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.510991096 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.511034012 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.511405945 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.511703968 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.511718035 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.521796942 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.522300005 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.522330999 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.522759914 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.522767067 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.570316076 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.570391893 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.570558071 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.570955038 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.570971012 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.571019888 CET	49932	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.571024895 CET	443	49932	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.575259924 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.575299025 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.575436115 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.575659037 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.575675011 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.968348026 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.971720934 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.971776962 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.971810102 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.971874952 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.971959114 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.971980095 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.972002029 CET	49934	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.972008944 CET	443	49934	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.975615025 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.975656033 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:04.975856066 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.976005077 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:04.976018906 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.349730968 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.350419998 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.350435019 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.350949049 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.350964069 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.560584068 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.561420918 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.561434031 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.562154055 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.562160015 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.794647932 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.798521042 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.798626900 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.798819065 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.798819065 CET	49935	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.798837900 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.798847914 CET	443	49935	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.802654982 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.802691936 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:05.802778006 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.803044081 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:05.803057909 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.007919073 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.011610031 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.011658907 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.011744976 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.011744976 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.011795044 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.011810064 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.011827946 CET	49936	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.011835098 CET	443	49936	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.015310049 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.015371084 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.015471935 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.015841961 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.015855074 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.354146957 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.355082989 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.355109930 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.355633020 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.355647087 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.399908066 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.404656887 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.404680967 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.405198097 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.405203104 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.783195019 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.784002066 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.784019947 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.784681082 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.784687042 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.957808971 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.958410978 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.958534956 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.958673954 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.958729982 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.958748102 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.958758116 CET	49938	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.958764076 CET	443	49938	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.962021112 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.962044001 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.962129116 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.962352991 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.962366104 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.975332022 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.978755951 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.978843927 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.978889942 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.978919029 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.978934050 CET	49937	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.978940964 CET	443	49937	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.982146025 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.982184887 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:06.982259035 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.982426882 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:06.982439995 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.104782104 CET	49710	80	192.168.2.5	93.184.221.240
Nov 25, 2024 17:58:07.104827881 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:58:07.104851961 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:58:07.226279974 CET	80	49710	93.184.221.240	192.168.2.5
Nov 25, 2024 17:58:07.226291895 CET	443	49712	20.190.177.149	192.168.2.5
Nov 25, 2024 17:58:07.226304054 CET	443	49709	20.190.177.149	192.168.2.5
Nov 25, 2024 17:58:07.226342916 CET	49710	80	192.168.2.5	93.184.221.240
Nov 25, 2024 17:58:07.226382971 CET	49709	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:58:07.226387024 CET	49712	443	192.168.2.5	20.190.177.149
Nov 25, 2024 17:58:07.235377073 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.235445023 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.235503912 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.235790014 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.235806942 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.235817909 CET	49939	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.235825062 CET	443	49939	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.239496946 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.239541054 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.239640951 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.239833117 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.239850044 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.599986076 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.600641966 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.600657940 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.601210117 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.601214886 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.837634087 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.838519096 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.838557005 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:07.838973045 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:07.838982105 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.072348118 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.072415113 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.072491884 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.072877884 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.072877884 CET	49940	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.072896004 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.072906971 CET	443	49940	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.076678991 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.076728106 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.076824903 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.077044010 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.077058077 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.285500050 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.288490057 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.288583994 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.288661003 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.288680077 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.288693905 CET	49941	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.288700104 CET	443	49941	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.292401075 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.292448044 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.292543888 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.292726994 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.292740107 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.855711937 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.856502056 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.856512070 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.857080936 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.857084990 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.921113968 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.922158957 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.922177076 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:08.922730923 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:08.922736883 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.063270092 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.063977957 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.064007044 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.064529896 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.064539909 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.294661999 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.297775984 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.297915936 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.298141003 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.298158884 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.298222065 CET	49942	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.298228025 CET	443	49942	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.302202940 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.302263975 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.302351952 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.302603960 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.302623987 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.375560045 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.378681898 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.378799915 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.378873110 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.378892899 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.378905058 CET	49943	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.378911972 CET	443	49943	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.382827044 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.382879972 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.382961988 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.383181095 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.383193970 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.501266003 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.504384995 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.504431963 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.504443884 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.504524946 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.504983902 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.505003929 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.505017042 CET	49944	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.505023003 CET	443	49944	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.510287046 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.510354996 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:09.510449886 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.510651112 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:09.510670900 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.034691095 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.035581112 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.035607100 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.036144972 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.036153078 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.174442053 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.175156116 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.175173044 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.175879002 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.175887108 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.491764069 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.496745110 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.496862888 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.496948004 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.496963978 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.496974945 CET	49945	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.496980906 CET	443	49945	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.500830889 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.500909090 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.501024008 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.501247883 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.501269102 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.623378992 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.626679897 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.626724958 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.626774073 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.626837969 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.626925945 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.626941919 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.626955032 CET	49946	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.626960993 CET	443	49946	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.630543947 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.630614042 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:10.630697966 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.630860090 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:10.630872011 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.244677067 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.245928049 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.245965958 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.246572971 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.246583939 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.313553095 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.314275026 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.314313889 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.314946890 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.314956903 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.377536058 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.378288984 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.378319979 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.378948927 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.378956079 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.822457075 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.825350046 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.825473070 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.825508118 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.825525999 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.825536013 CET	49947	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.825550079 CET	443	49947	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.829269886 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.829298973 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.829433918 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.829597950 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.829618931 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.894886971 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.898163080 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.898281097 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.898324966 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.898324966 CET	49949	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.898348093 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.898358107 CET	443	49949	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.901784897 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.901823997 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.901910067 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.902079105 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.902095079 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.961797953 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.964957952 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.965012074 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.965058088 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.965094090 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.965158939 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.965178013 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.965189934 CET	49948	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.965195894 CET	443	49948	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.968677044 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.968707085 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:11.968852043 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.969129086 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:11.969141960 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.180252075 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.181045055 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.181092024 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.181605101 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.181618929 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.349425077 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.350183010 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.350204945 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.350863934 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.350872993 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.653336048 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.656805992 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.656851053 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.656871080 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.656917095 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.656975985 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.657002926 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.657017946 CET	49950	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.657032967 CET	443	49950	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.660800934 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.660830975 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.660933971 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.661083937 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.661096096 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.793853998 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.796123981 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.796183109 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.796233892 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.796251059 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.796262980 CET	49951	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.796268940 CET	443	49951	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.799863100 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.799916029 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:12.799978971 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.800158978 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:12.800164938 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.611110926 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.612521887 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:13.612540007 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.613050938 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:13.613055944 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.692833900 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.693670988 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:13.693681002 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.694159985 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:13.694164991 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.790699005 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.791573048 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:13.791598082 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:13.792088985 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:13.792095900 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.063702106 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.063724995 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.063905954 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.063920021 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.064265966 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.064276934 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.064299107 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.064439058 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.064475060 CET	443	49952	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.067739964 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.067780972 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.067811966 CET	49952	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.067888975 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.068145990 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.068161011 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.147352934 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.147384882 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.147437096 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.147500038 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.147563934 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.147878885 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.147878885 CET	49954	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.147902012 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.147912025 CET	443	49954	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.151722908 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.151770115 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.151874065 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.152061939 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.152076006 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.268600941 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.268625975 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.268717051 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.268735886 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.269078016 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.269092083 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.269143105 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.269226074 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.269254923 CET	443	49953	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.269357920 CET	49953	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.272552967 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.272593975 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.272679090 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.272881031 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.272896051 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.495270014 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.496073961 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.496093988 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.496612072 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.496617079 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.712793112 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.713574886 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.713615894 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.714097023 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.714104891 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.946763992 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.949599028 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.949737072 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.949737072 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.949769020 CET	49956	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.949790955 CET	443	49956	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.953471899 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.953517914 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:14.953594923 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.953756094 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:14.953769922 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.168203115 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.171773911 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.171847105 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.171871901 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.171916962 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.171982050 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.172003031 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.172049046 CET	49957	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.172055006 CET	443	49957	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.175458908 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.175518036 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.175595045 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.175756931 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.175771952 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.901540995 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.902400017 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.902410984 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:15.902996063 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:15.903002024 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.059075117 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.059679985 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.059717894 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.060185909 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.060193062 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.372894049 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.372965097 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.373191118 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.373578072 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.373578072 CET	49958	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.373593092 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.373601913 CET	443	49958	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.377402067 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.377443075 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.377557993 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.377715111 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.377722979 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.514847994 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.518018007 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.518066883 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.518220901 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.518276930 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.518276930 CET	49959	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.518301010 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.518312931 CET	443	49959	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.521955013 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.522031069 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.522294998 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.522495031 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.522528887 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.819686890 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.820547104 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.820580006 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:16.821089029 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:16.821095943 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.179330111 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.180088997 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.180109978 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.180598974 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.180603981 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.275695086 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.279673100 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.279716969 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.279742956 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.279772997 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.279839039 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.279855967 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.279865980 CET	49961	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.279871941 CET	443	49961	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.283536911 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.283591032 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.283665895 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.283829927 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.283843994 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.640028954 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.643354893 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.643441916 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.643493891 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.643512011 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.643522978 CET	49962	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.643527985 CET	443	49962	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.646897078 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.646965981 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:17.647052050 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.647203922 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:17.647249937 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.240904093 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.241760969 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.241790056 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.242330074 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.242338896 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.343502998 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.344383001 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.344413042 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.344899893 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.344914913 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.705729008 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.709839106 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.709886074 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.709898949 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.709944010 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.710024118 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.710043907 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.710057020 CET	49963	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.710063934 CET	443	49963	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.713973045 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.714018106 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.714085102 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.714307070 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.714322090 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.802339077 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.805438042 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.805535078 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.808180094 CET	49964	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.808229923 CET	443	49964	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.812172890 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.812216043 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:18.812278032 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.812817097 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:18.812829971 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.035296917 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.035921097 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.035960913 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.036670923 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.036678076 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.078234911 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.078902960 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.078922987 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.079530954 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.079540014 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.509490967 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.510160923 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.510194063 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.510709047 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.510715008 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.511645079 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.514966965 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.515055895 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.515527010 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.515527010 CET	49965	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.515552998 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.515563011 CET	443	49965	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.519166946 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.519205093 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.519284010 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.519463062 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.519480944 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.526774883 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.526839972 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.526998043 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.527026892 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.527040005 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.527050018 CET	49960	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.527055025 CET	443	49960	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.529690027 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.529730082 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.529823065 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.529983997 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.529995918 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.969906092 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.972904921 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.972964048 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.972985029 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.973022938 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.973077059 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.973098040 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.973108053 CET	49966	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.973114014 CET	443	49966	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.976358891 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.976411104 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:19.976483107 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.976655960 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:19.976667881 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:20.581300020 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:20.582010984 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:20.582036018 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:20.582542896 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:20.582549095 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:20.643332958 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:20.644114971 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:20.644145012 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:20.644692898 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:20.644699097 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.042102098 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.045403004 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.045483112 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.045542002 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.045555115 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.045567036 CET	49967	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.045572996 CET	443	49967	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.049772978 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.049798012 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.049860001 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.050043106 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.050055981 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.063569069 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.065264940 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.065290928 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.065778971 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.065784931 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.089495897 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.092730045 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.092799902 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.092868090 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.092880964 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.092902899 CET	49968	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.092909098 CET	443	49968	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.096682072 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.096766949 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.096883059 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.097062111 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.097100973 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.442923069 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.443633080 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.443650007 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.444138050 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.444144964 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.517035007 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.520674944 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.520735979 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.520778894 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.520818949 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.520914078 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.520929098 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.520940065 CET	49969	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.520946980 CET	443	49969	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.524369001 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.524432898 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.524511099 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.524676085 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.524688959 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.978014946 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.978851080 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.978904009 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:21.979386091 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:21.979389906 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.057174921 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.057240009 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.057293892 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.057590961 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.057607889 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.057617903 CET	49970	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.057624102 CET	443	49970	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.061348915 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.061408997 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.061496973 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.061731100 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.061767101 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.446762085 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.446784973 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.446825981 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.446882010 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.446928978 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.447280884 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.447287083 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.447298050 CET	49971	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.447303057 CET	443	49971	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.451113939 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.451162100 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.451268911 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.451510906 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.451524019 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.818759918 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.819506884 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.819538116 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.820031881 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.820043087 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.940702915 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.941538095 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.941584110 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:22.942034960 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:22.942042112 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.264370918 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.267570019 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.267707109 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.267771006 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.267800093 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.267818928 CET	49972	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.267832994 CET	443	49972	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.271246910 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.271285057 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.271377087 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.272207975 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.272222042 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.306418896 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.307143927 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.307177067 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.307667017 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.307674885 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.406555891 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.406634092 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.406722069 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.407016039 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.407056093 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.407088041 CET	49973	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.407104969 CET	443	49973	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.410736084 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.410772085 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.410857916 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.411079884 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.411092997 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.746357918 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.750262022 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.750310898 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.750335932 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.750396967 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.750478029 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.750498056 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.750511885 CET	49974	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.750518084 CET	443	49974	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.754136086 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.754168034 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.754254103 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.754414082 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.754427910 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.923707008 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.929896116 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.929964066 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:23.930605888 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:23.930620909 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.390388012 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.390579939 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.390652895 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.390933037 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.390984058 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.391015053 CET	49975	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.391032934 CET	443	49975	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.394959927 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.395014048 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.395113945 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.395318031 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.395328999 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.464278936 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.465295076 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.465313911 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.465962887 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.465969086 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.968378067 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.971724033 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.971793890 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.971945047 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.971962929 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.971972942 CET	49976	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.971980095 CET	443	49976	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.980844021 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.980870008 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:24.980940104 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.981205940 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:24.981223106 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.087553978 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.088242054 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.088253021 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.088810921 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.088816881 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.293870926 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.294928074 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.294945002 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.295213938 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.295226097 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.539840937 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.539921999 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.539966106 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.540026903 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.540250063 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.540265083 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.540280104 CET	49977	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.540285110 CET	443	49977	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.543981075 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.544003010 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.544091940 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.544279099 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.544290066 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.730010986 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.730722904 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.730731964 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.731436968 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.731441021 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.752682924 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.755750895 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.755853891 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.755853891 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.756108046 CET	49978	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.756129026 CET	443	49978	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.760272026 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.760310888 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:25.760399103 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.760565042 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:25.760581017 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.176569939 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.179514885 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.179565907 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.179617882 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.179701090 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.179723978 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.179723978 CET	49979	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.179748058 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.179758072 CET	443	49979	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.183402061 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.183449984 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.183540106 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.183726072 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.183739901 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.340023994 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.340718031 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.340745926 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.341259003 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.341264009 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.791512966 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.794708014 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.794785023 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.794919968 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.794950008 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.794961929 CET	49980	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.794967890 CET	443	49980	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.799182892 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.799220085 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.799324989 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.799557924 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.799573898 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.803906918 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.804460049 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.804476976 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.805074930 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:26.805090904 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:26.816664934 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:26.816704988 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:26.816764116 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:26.817604065 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:26.817619085 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:26.823282957 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:26.823358059 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:26.823436975 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:26.824022055 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:26.824042082 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:27.252075911 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.255342960 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.255445004 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.255527020 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.255542040 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.255553961 CET	49981	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.255561113 CET	443	49981	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.259171963 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.259197950 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.259275913 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.259442091 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.259454966 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.544020891 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.544696093 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.544728041 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.545222044 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.545234919 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.610912085 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.611526966 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.611552954 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:27.612046957 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:27.612054110 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.048463106 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.049222946 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.049238920 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.049859047 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.049865007 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.058458090 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.058520079 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.058582067 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.058898926 CET	49982	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.058912992 CET	443	49982	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.073599100 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.075103045 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.075158119 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.075249910 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.075814009 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.075829029 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.076483011 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.076523066 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.076579094 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.076625109 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.076653957 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.076668024 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.076677084 CET	49983	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.076683044 CET	443	49983	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.082849026 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.082875967 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.082938910 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.083718061 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.083731890 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.498322964 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.502051115 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.502147913 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.502191067 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.502192020 CET	49984	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.502207994 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.502218008 CET	443	49984	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.505439043 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.505476952 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.505548000 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.505717993 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.505732059 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.569232941 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.569825888 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.569848061 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:28.570353031 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:28.570358038 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.018301964 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.021543980 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.021594048 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.021711111 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.021711111 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.021744967 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.021744967 CET	49985	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.021760941 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.021770000 CET	443	49985	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.025420904 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.025463104 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.025544882 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.025713921 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.025729895 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.135986090 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.136634111 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.136650085 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.137156010 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.137161970 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.192164898 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.192296028 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.194308043 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.194318056 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.194595098 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.196921110 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.196994066 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.197000027 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.197173119 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.243331909 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.255464077 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.255604982 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.257627964 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.257638931 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.257874012 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.259358883 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.259438992 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.259443998 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.259555101 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.307334900 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.597414017 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.601066113 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.601172924 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.601247072 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.601263046 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.601300001 CET	49988	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.601308107 CET	443	49988	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.605082035 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.605093956 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.605171919 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.605412960 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.605424881 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.783133030 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.783226967 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.783360004 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.783602953 CET	49987	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.783612013 CET	443	49987	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.885451078 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.886178017 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.886193991 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.886687994 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.886694908 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.940761089 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.941768885 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.941787004 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.942152977 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:29.942157984 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:29.950896978 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.951236963 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:29.951323032 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.951457024 CET	49986	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:58:29.951477051 CET	443	49986	20.198.118.190	192.168.2.5
Nov 25, 2024 17:58:30.332307100 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.335195065 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.335239887 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.335297108 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.335357904 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.335443974 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.335459948 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.335473061 CET	49989	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.335479021 CET	443	49989	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.339251041 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.339291096 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.339375973 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.339566946 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.339580059 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.397095919 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.400397062 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.400516033 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.400541067 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.400557995 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.400594950 CET	49990	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.400602102 CET	443	49990	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.404215097 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.404254913 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.404328108 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.404516935 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.404530048 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.519886971 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.520513058 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.520534039 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.521198034 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.521203995 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.750370026 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.751311064 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.751327991 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.752196074 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.752202034 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.967027903 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.970230103 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.970304966 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.970403910 CET	49991	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.970428944 CET	443	49991	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.974307060 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.974354029 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:30.974442005 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.974730015 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:30.974745035 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.193713903 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.196553946 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.196651936 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.196763992 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.196764946 CET	49992	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.196810961 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.196839094 CET	443	49992	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.200875044 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.200920105 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.200990915 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.201220036 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.201231003 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.453907967 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.454606056 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.454627037 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.455141068 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.455149889 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.907149076 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.910732031 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.910774946 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.910854101 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.910933018 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.910957098 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.910964012 CET	49993	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.910969973 CET	443	49993	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.914813995 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.914843082 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:31.914937973 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.915167093 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:31.915179968 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.212061882 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.213959932 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.214013100 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.214674950 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.214684963 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.330892086 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.331693888 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.331741095 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.332191944 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.332200050 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.706891060 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.709754944 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.709858894 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.709924936 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.709948063 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.709968090 CET	49994	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.709974051 CET	443	49994	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.714071035 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.714113951 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.714232922 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.714454889 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.714468956 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.807585955 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.808499098 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.808525085 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.808949947 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.808955908 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.886900902 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.889971018 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.890043974 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.890259981 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.890283108 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.890295029 CET	49995	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.890300989 CET	443	49995	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.893804073 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.893831015 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:32.893909931 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.894110918 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:32.894120932 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.091749907 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.092489958 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.092525005 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.093044043 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.093050003 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.278887033 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.278980970 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.279179096 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.279297113 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.279321909 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.279336929 CET	49996	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.279342890 CET	443	49996	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.283107996 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.283145905 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.283229113 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.283415079 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.283423901 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.546421051 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.549565077 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.549673080 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.550205946 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.550206900 CET	49997	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.550234079 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.550246954 CET	443	49997	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.557029009 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.557084084 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.557178974 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.557348967 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.557362080 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.747683048 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.748486042 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.748506069 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:33.749073982 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:33.749082088 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.205504894 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.206295013 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.206401110 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.206456900 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.206469059 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.206485987 CET	49998	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.206491947 CET	443	49998	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.209968090 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.210026026 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.210129976 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.210304022 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.210314989 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.457129002 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.458013058 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.458050013 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.458543062 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.458554029 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.749609947 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.750313044 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.750353098 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.750864983 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.750873089 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.933286905 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.936359882 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.936455011 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.936640978 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.936671019 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.936688900 CET	49999	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.936695099 CET	443	49999	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.940277100 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.940335989 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:34.940427065 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.940584898 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:34.940599918 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.021339893 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.022028923 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.022063971 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.022563934 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.022568941 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.283546925 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.286674976 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.286793947 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.287086010 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.287111998 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.287123919 CET	50000	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.287130117 CET	443	50000	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.295352936 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.295388937 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.295475960 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.295722961 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.295733929 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.481839895 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.485265970 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.485352993 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.485369921 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.485420942 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.485481977 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.485497952 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.485510111 CET	50001	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.485516071 CET	443	50001	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.488868952 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.488919020 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:35.489037037 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.489197969 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:35.489214897 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.279133081 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.280014992 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.280028105 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.280719995 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.280725956 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.735418081 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.738950968 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.739017963 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.739025116 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.739084959 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.739150047 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.739162922 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.739176035 CET	50003	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.739181042 CET	443	50003	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.742563963 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.742604971 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.742676020 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.742863894 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.742873907 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.809150934 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.809819937 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.809849977 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.810434103 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.810441971 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.897377968 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.898026943 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.898061991 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:36.898576975 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:36.898591042 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.301724911 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.302162886 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.302349091 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.302377939 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.302947044 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.302953005 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.305332899 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.305537939 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.305576086 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.305588007 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.305604935 CET	50004	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.305610895 CET	443	50004	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.308708906 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.308747053 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.308821917 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.308990955 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.309004068 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.353858948 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.357249975 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.357316017 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.357330084 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.357394934 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.357434988 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.357455969 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.357469082 CET	50005	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.357475996 CET	443	50005	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.362907887 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.362943888 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.363359928 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.363655090 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.363668919 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.762911081 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.766199112 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.766295910 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.766379118 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.766403913 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.766416073 CET	50006	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.766422987 CET	443	50006	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.769989967 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.770040035 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:37.770190954 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.770423889 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:37.770431042 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.424750090 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.425404072 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.425438881 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.425931931 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.425935984 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.647870064 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.648700953 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.648716927 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.649229050 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.649235964 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.885052919 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.885220051 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.885309935 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.885504007 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.885521889 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.885540962 CET	50002	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.885548115 CET	443	50002	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.889307976 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.889368057 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:38.889465094 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.889664888 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:38.889682055 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.112109900 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.112181902 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.112286091 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.112608910 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.112637043 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.112653971 CET	50007	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.112677097 CET	443	50007	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.116365910 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.116401911 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.116492987 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.116688967 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.116699934 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.134116888 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.134850979 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.134901047 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.135395050 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.135401964 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.337439060 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.338182926 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.338205099 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.338732004 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.338737011 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.492098093 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.492923975 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.492969036 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.493475914 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.493482113 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.580230951 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.583384991 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.583484888 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.583539963 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.583559036 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.583570004 CET	50008	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.583575010 CET	443	50008	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.587102890 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.587141991 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.587232113 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.587404013 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.587414980 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.804508924 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.807683945 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.807765961 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.807774067 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.807842970 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.808832884 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.808854103 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.808867931 CET	50009	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.808876038 CET	443	50009	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.812087059 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.812140942 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.812203884 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.812483072 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.812500000 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.953020096 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.956156969 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.956249952 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.956317902 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.956340075 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.956351995 CET	50010	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.956357956 CET	443	50010	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.959929943 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.959971905 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:39.960063934 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.960253000 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:39.960264921 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:40.704201937 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:40.704963923 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:40.704988003 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:40.705599070 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:40.705604076 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:40.906795979 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:40.907601118 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:40.907618999 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:40.908334017 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:40.908339024 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.149949074 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.150032997 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.150080919 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.150660038 CET	50011	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.150681973 CET	443	50011	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.162019014 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.162086010 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.162152052 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.162370920 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.162388086 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.358340025 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.358398914 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.358457088 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.358479977 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.358500004 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.358576059 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.359740019 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.359754086 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.359792948 CET	50012	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.359798908 CET	443	50012	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.364804029 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.364860058 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.364955902 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.365098000 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.365114927 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.425107002 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.425853968 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.425875902 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.426378012 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.426383972 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.612632036 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.613473892 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.613504887 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.613985062 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.613991022 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.781673908 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.782774925 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.782787085 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.783689976 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.783696890 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.948457003 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.948533058 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.948678970 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.949014902 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.949014902 CET	50013	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.949032068 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.949039936 CET	443	50013	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.952840090 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.952896118 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:41.953025103 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.953248024 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:41.953260899 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.074484110 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.074508905 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.074701071 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.074726105 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.075191975 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.075191975 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.075206995 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.075407982 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.075439930 CET	443	50014	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.075511932 CET	50014	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.079194069 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.079257965 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.079371929 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.079600096 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.079616070 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.294305086 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.294332027 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.294492960 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.294507980 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.294910908 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.294926882 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.294936895 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.295095921 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.295129061 CET	443	50015	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.295183897 CET	50015	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.299056053 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.299114943 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.299216032 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.299511909 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.299529076 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.955576897 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.956293106 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.956322908 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:42.956873894 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:42.956881046 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.277276039 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.278089046 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.278167963 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.278620958 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.278629065 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.407336950 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.407363892 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.407502890 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.407533884 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.407891035 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.407907963 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.407953024 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.408104897 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.408138990 CET	443	50016	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.408180952 CET	50016	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.411211014 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.411262035 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.411341906 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.411501884 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.411519051 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767189980 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767215014 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767296076 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.767334938 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767617941 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.767637968 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767654896 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.767808914 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767839909 CET	443	50017	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.767875910 CET	50017	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.770925045 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.770972013 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.771034956 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.771204948 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.771215916 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.777964115 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.778417110 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.778445959 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.778927088 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.778933048 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.910212994 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.910862923 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.910926104 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:43.911565065 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:43.911577940 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.111253023 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.111852884 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.111891985 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.112476110 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.112484932 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.223975897 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.224057913 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.224121094 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.224478960 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.224502087 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.224513054 CET	50018	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.224519014 CET	443	50018	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.230690956 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.230734110 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.230796099 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.231121063 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.231132984 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.359925985 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.359998941 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.360135078 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.360399008 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.360424995 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.360439062 CET	50019	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.360445976 CET	443	50019	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.363811016 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.363852978 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.363943100 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.364181995 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.364195108 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.567507029 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.567586899 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.567706108 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.568249941 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.568270922 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.568293095 CET	50020	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.568300009 CET	443	50020	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.575333118 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.575366974 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:44.575464964 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.575617075 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:44.575628996 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.198775053 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.199605942 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.199625969 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.200160980 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.200166941 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.584623098 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.585247040 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.585282087 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.585767984 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.585774899 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.648052931 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.648181915 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.648273945 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.648469925 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.648488045 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.648500919 CET	50021	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.648508072 CET	443	50021	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.652178049 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.652198076 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:45.652287960 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.652482986 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:45.652494907 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.041429996 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.041448116 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.041562080 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.041596889 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.041646957 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.041815996 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.041821957 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.041841984 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.042063951 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.042094946 CET	443	50022	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.042150974 CET	50022	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.044848919 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.044888973 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.044965029 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.045202017 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.045214891 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.077586889 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.078116894 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.078140020 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.078619003 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.078624010 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.226664066 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.227524042 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.227560043 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.228096962 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.228102922 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.365185022 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.366050005 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.366066933 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.366745949 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.366753101 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.597934961 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.597973108 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.598047972 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.598105907 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.598145008 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.598445892 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.598465919 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.598479033 CET	50023	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.598484993 CET	443	50023	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.602011919 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.602049112 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.602144003 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.602315903 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.602330923 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.803361893 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.803389072 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.803404093 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.803513050 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.803528070 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.803570032 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.803597927 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.810730934 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.810754061 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.810822964 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.810843945 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.810908079 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.810957909 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.811018944 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.811024904 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.811038971 CET	50025	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.811043978 CET	443	50025	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.814642906 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.814675093 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.814786911 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.814966917 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.814980030 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.958594084 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.958686113 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.958684921 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.958741903 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.958952904 CET	50024	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.958971024 CET	443	50024	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.965332031 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.965372086 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:46.965431929 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.965898991 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:46.965915918 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.345521927 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:47.345597982 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:47.345678091 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:47.345998049 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:47.346014977 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:47.445826054 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.446558952 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:47.446579933 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.447089911 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:47.447096109 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.845510006 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.846235037 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:47.846250057 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.846776962 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:47.846781015 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.939116955 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.939146996 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.939162970 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.939240932 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:47.939254999 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:47.939307928 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.123264074 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.123326063 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.123394012 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.123399973 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.123465061 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.123553038 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.123570919 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.123583078 CET	50026	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.123590946 CET	443	50026	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.126987934 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.127046108 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.127141953 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.127295971 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.127321959 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.299994946 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.300040960 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.300128937 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.300132036 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.300184011 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.300510883 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.300529957 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.300539970 CET	50027	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.300545931 CET	443	50027	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.304285049 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.304338932 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.304419994 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.304605961 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.304622889 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.444220066 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.445101023 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.445142984 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.445784092 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.445792913 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.913552999 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.913590908 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.913659096 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.913728952 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.913774014 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.914119959 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.914144039 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.914155006 CET	50028	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.914160967 CET	443	50028	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.915641069 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.916174889 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.916191101 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.916241884 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.916666985 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.916671991 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.916907072 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.916920900 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.917270899 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.917275906 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.917684078 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.917727947 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:48.917795897 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.917932987 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:48.917946100 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.103849888 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:49.104438066 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:49.104479074 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:49.104821920 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:49.105184078 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:49.105252981 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:49.156320095 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:49.352225065 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.352304935 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.352392912 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.352680922 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.352694988 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.352703094 CET	50030	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.352713108 CET	443	50030	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.356220007 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.356267929 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.356352091 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.356543064 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.356560946 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.373699903 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.376861095 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.376997948 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.377073050 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.377073050 CET	50029	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.377089977 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.377100945 CET	443	50029	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.387953043 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.387964010 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.388068914 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.388211966 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.388225079 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.894489050 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.895117998 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.895152092 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:49.895699024 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:49.895705938 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.045752048 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.046309948 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.046333075 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.047080994 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.047087908 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.344059944 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.347178936 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.347243071 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.347273111 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.347285986 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.347297907 CET	50033	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.347305059 CET	443	50033	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.351102114 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.351130962 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.351248980 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.351428986 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.351443052 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.515496016 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.518448114 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.518559933 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.518646955 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.518663883 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.518676996 CET	50032	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.518682003 CET	443	50032	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.522114038 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.522145033 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.522425890 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.522425890 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.522450924 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.689971924 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.690695047 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.690721989 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:50.691199064 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:50.691205025 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.129743099 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.132906914 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.132977009 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.132980108 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.133069038 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.133116961 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.133132935 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.133177042 CET	50034	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.133183002 CET	443	50034	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.175261974 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.175920010 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.175971985 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.176445007 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.176451921 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.238979101 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.239716053 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.239726067 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.240233898 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.240243912 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.752687931 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.755975962 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.756079912 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.756177902 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.756179094 CET	50035	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.756226063 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.756253958 CET	443	50035	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.759048939 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.762300968 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.762377024 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.762439013 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.762439013 CET	50036	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.762445927 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.762455940 CET	443	50036	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.986579895 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.987246037 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.987266064 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:51.987776041 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:51.987787008 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.251530886 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.252110004 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.252126932 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.252882957 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.252890110 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.442886114 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.442972898 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.443063021 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.443419933 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.443444967 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.443456888 CET	50037	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.443464041 CET	443	50037	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.692722082 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.692794085 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.692881107 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.693120003 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.693136930 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:52.693150043 CET	50038	443	192.168.2.5	13.107.246.63
Nov 25, 2024 17:58:52.693156004 CET	443	50038	13.107.246.63	192.168.2.5
Nov 25, 2024 17:58:58.787075996 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:58.787138939 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:58:58.787276983 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:58.891422033 CET	50031	443	192.168.2.5	142.250.181.68
Nov 25, 2024 17:58:58.891448021 CET	443	50031	142.250.181.68	192.168.2.5
Nov 25, 2024 17:59:05.037535906 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:05.037580013 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:05.037698984 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:05.038409948 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:05.038424015 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:05.039309978 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:05.039375067 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:05.039457083 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:05.040018082 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:05.040035009 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.294826984 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.294958115 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.312621117 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.312674046 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.312958002 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.315095901 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.315154076 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.315160036 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.315310001 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.359330893 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.374320984 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.376336098 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.380310059 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.380317926 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.380599022 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.384309053 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.384309053 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.384309053 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.384322882 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.431323051 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.894324064 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.894501925 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:07.894679070 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.894781113 CET	50040	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:07.894802094 CET	443	50040	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:08.060971975 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:08.061187029 CET	443	50039	20.198.118.190	192.168.2.5
Nov 25, 2024 17:59:08.061271906 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:08.061988115 CET	50039	443	192.168.2.5	20.198.118.190
Nov 25, 2024 17:59:08.062001944 CET	443	50039	20.198.118.190	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 17:56:43.234802008 CET	53	54902	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:43.249907017 CET	53	56388	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:45.982848883 CET	53	62246	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:47.219922066 CET	61257	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:56:47.220403910 CET	54602	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:56:47.358803988 CET	53	61257	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:47.359271049 CET	53	54602	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:47.700198889 CET	53	53258	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:51.926167011 CET	62676	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:56:51.926378012 CET	63028	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:56:52.161602020 CET	53	63028	1.1.1.1	192.168.2.5
Nov 25, 2024 17:56:52.163517952 CET	53	62676	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:03.044599056 CET	53	59039	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:12.354736090 CET	62356	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:57:12.354883909 CET	51945	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:57:12.508236885 CET	53	51945	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:12.508344889 CET	53	62356	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:16.602025986 CET	50013	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:57:16.602176905 CET	63409	53	192.168.2.5	1.1.1.1
Nov 25, 2024 17:57:16.770003080 CET	53	50013	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:16.772079945 CET	53	63409	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:22.152972937 CET	53	60469	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:42.632601023 CET	53	65398	1.1.1.1	192.168.2.5
Nov 25, 2024 17:57:44.787272930 CET	53	52844	1.1.1.1	192.168.2.5
Nov 25, 2024 17:58:12.593313932 CET	53	64019	1.1.1.1	192.168.2.5
Nov 25, 2024 17:58:59.032952070 CET	53	63400	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 17:56:47.219922066 CET	192.168.2.5	1.1.1.1	0xcfed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:47.220403910 CET	192.168.2.5	1.1.1.1	0xeee7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 17:56:51.926167011 CET	192.168.2.5	1.1.1.1	0x17fb	Standard query (0)	url.us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:51.926378012 CET	192.168.2.5	1.1.1.1	0xa3cd	Standard query (0)	url.us.m.mimecastprotect.com	65	IN (0x0001)	false
Nov 25, 2024 17:57:12.354736090 CET	192.168.2.5	1.1.1.1	0x22c8	Standard query (0)	security-us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.354883909 CET	192.168.2.5	1.1.1.1	0x2405	Standard query (0)	security-us.m.mimecastprotect.com	65	IN (0x0001)	false
Nov 25, 2024 17:57:16.602025986 CET	192.168.2.5	1.1.1.1	0xb80a	Standard query (0)	security-us.m.mimecastprotect.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.602176905 CET	192.168.2.5	1.1.1.1	0xc79	Standard query (0)	security-us.m.mimecastprotect.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 17:56:47.358803988 CET	1.1.1.1	192.168.2.5	0xcfed	No error (0)	www.google.com	142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:47.359271049 CET	1.1.1.1	192.168.2.5	0xeee7	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 25, 2024 17:56:52.163517952 CET	1.1.1.1	192.168.2.5	0x17fb	No error (0)	url.us.m.mimecastprotect.com	205.139.111.117	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:52.163517952 CET	1.1.1.1	192.168.2.5	0x17fb	No error (0)	url.us.m.mimecastprotect.com	207.211.31.113	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:52.163517952 CET	1.1.1.1	192.168.2.5	0x17fb	No error (0)	url.us.m.mimecastprotect.com	207.211.31.106	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:52.163517952 CET	1.1.1.1	192.168.2.5	0x17fb	No error (0)	url.us.m.mimecastprotect.com	207.211.31.64	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:52.163517952 CET	1.1.1.1	192.168.2.5	0x17fb	No error (0)	url.us.m.mimecastprotect.com	205.139.111.113	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:56:52.163517952 CET	1.1.1.1	192.168.2.5	0x17fb	No error (0)	url.us.m.mimecastprotect.com	205.139.111.12	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.508344889 CET	1.1.1.1	192.168.2.5	0x22c8	No error (0)	security-us.m.mimecastprotect.com	170.10.128.88	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.508344889 CET	1.1.1.1	192.168.2.5	0x22c8	No error (0)	security-us.m.mimecastprotect.com	170.10.132.88	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.508344889 CET	1.1.1.1	192.168.2.5	0x22c8	No error (0)	security-us.m.mimecastprotect.com	170.10.132.89	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.508344889 CET	1.1.1.1	192.168.2.5	0x22c8	No error (0)	security-us.m.mimecastprotect.com	170.10.132.87	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.508344889 CET	1.1.1.1	192.168.2.5	0x22c8	No error (0)	security-us.m.mimecastprotect.com	170.10.128.87	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:12.508344889 CET	1.1.1.1	192.168.2.5	0x22c8	No error (0)	security-us.m.mimecastprotect.com	170.10.128.89	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.770003080 CET	1.1.1.1	192.168.2.5	0xb80a	No error (0)	security-us.m.mimecastprotect.com	170.10.128.88	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.770003080 CET	1.1.1.1	192.168.2.5	0xb80a	No error (0)	security-us.m.mimecastprotect.com	170.10.132.88	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.770003080 CET	1.1.1.1	192.168.2.5	0xb80a	No error (0)	security-us.m.mimecastprotect.com	170.10.132.89	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.770003080 CET	1.1.1.1	192.168.2.5	0xb80a	No error (0)	security-us.m.mimecastprotect.com	170.10.132.87	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.770003080 CET	1.1.1.1	192.168.2.5	0xb80a	No error (0)	security-us.m.mimecastprotect.com	170.10.128.89	A (IP address)	IN (0x0001)	false
Nov 25, 2024 17:57:16.770003080 CET	1.1.1.1	192.168.2.5	0xb80a	No error (0)	security-us.m.mimecastprotect.com	170.10.128.87	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

slscr.update.microsoft.com

fs.microsoft.com

url.us.m.mimecastprotect.com

security-us.m.mimecastprotect.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49713	20.190.177.22	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:38 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-25 16:56:38 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-25 16:56:39 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 25 Nov 2024 16:55:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BAY x-ms-request-id: 2724649f-d976-44e6-b839-9f6d63a64432 PPServer: PPV: 30 H: PH1PEPF0001B872 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 25 Nov 2024 16:56:38 GMT Connection: close Content-Length: 1918
2024-11-25 16:56:39 UTC	1918	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49715	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:41 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 49 64 6c 4e 35 57 34 6c 2f 45 53 2f 59 31 78 47 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 62 61 37 64 34 32 66 34 32 39 37 38 36 32 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: IdlN5W4l/ES/Y1xG.1Context: fba7d42f4297862a
2024-11-25 16:56:41 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:56:41 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 49 64 6c 4e 35 57 34 6c 2f 45 53 2f 59 31 78 47 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 62 61 37 64 34 32 66 34 32 39 37 38 36 32 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 55 6c 6e 71 35 78 32 46 2b 77 77 53 51 42 47 37 44 42 6e 42 74 6e 4e 70 4c 7a 6b 66 69 59 66 49 7a 65 78 71 7a 6d 55 56 57 32 43 4d 71 52 55 6a 79 44 76 63 36 62 6e 77 43 4a 34 49 67 69 79 55 32 2f 66 61 71 30 44 6b 50 6d 43 6e 39 48 46 55 42 6f 56 33 77 67 6e 68 62 47 76 71 30 65 6a 41 2b 38 72 4e 38 49 67 76 31 52 58 41 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: IdlN5W4l/ES/Y1xG.2Context: fba7d42f4297862a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATUlnq5x2F+wwSQBG7DBnBtnNpLzkfiYfIzexqzmUVW2CMqRUjyDvc6bnwCJ4IgiyU2/faq0DkPmCn9HFUBoV3wgnhbGvq0ejA+8rN8Igv1RXA
2024-11-25 16:56:41 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 49 64 6c 4e 35 57 34 6c 2f 45 53 2f 59 31 78 47 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 62 61 37 64 34 32 66 34 32 39 37 38 36 32 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: IdlN5W4l/ES/Y1xG.3Context: fba7d42f4297862a
2024-11-25 16:56:42 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:56:42 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6e 35 71 76 33 78 62 51 38 6b 71 77 2f 68 30 4d 57 2f 55 4e 39 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: n5qv3xbQ8kqw/h0MW/UN9A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49714	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:41 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 71 76 31 7a 68 38 4d 62 30 69 76 53 37 76 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 66 63 32 62 61 35 32 63 32 34 37 36 33 33 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9qv1zh8Mb0ivS7vt.1Context: 6fc2ba52c2476338
2024-11-25 16:56:41 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:56:41 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 71 76 31 7a 68 38 4d 62 30 69 76 53 37 76 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 66 63 32 62 61 35 32 63 32 34 37 36 33 33 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 50 59 33 4e 69 42 4e 68 4c 4f 70 33 53 6c 77 42 4d 49 41 34 4f 79 6a 45 73 59 57 39 63 54 42 6f 45 4c 51 6d 49 68 56 55 59 6a 61 54 41 69 43 62 78 37 68 48 6b 44 72 70 71 4c 6d 71 74 51 73 52 6e 72 49 30 74 38 73 4c 77 78 77 54 48 77 6b 30 5a 66 4d 70 35 55 72 66 78 74 7a 4e 68 2f 30 75 67 32 61 52 2f 44 51 61 48 38 78 6a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 9qv1zh8Mb0ivS7vt.2Context: 6fc2ba52c2476338<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUPY3NiBNhLOp3SlwBMIA4OyjEsYW9cTBoELQmIhVUYjaTAiCbx7hHkDrpqLmqtQsRnrI0t8sLwxwTHwk0ZfMp5UrfxtzNh/0ug2aR/DQaH8xj
2024-11-25 16:56:41 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 71 76 31 7a 68 38 4d 62 30 69 76 53 37 76 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 66 63 32 62 61 35 32 63 32 34 37 36 33 33 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9qv1zh8Mb0ivS7vt.3Context: 6fc2ba52c2476338<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 16:56:42 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:56:42 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 51 39 36 74 33 69 76 6d 30 2b 4b 4b 6f 35 66 52 77 76 62 41 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qQ96t3ivm0+KKo5fRwvbAA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49717	20.190.177.22	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:41 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-25 16:56:41 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-25 16:56:42 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 25 Nov 2024 16:55:42 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C512_BAY x-ms-request-id: 898fd819-42e2-4c30-92e4-e1075a1765b1 PPServer: PPV: 30 H: PH1PEPF00011F0E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 25 Nov 2024 16:56:42 GMT Connection: close Content-Length: 11409
2024-11-25 16:56:42 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:43 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:44 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:44 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: c3062018-b01e-003e-79df-3d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165644Z-178bfbc474bbbqrhhC1NYCvw7400000007z0000000004dwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:44 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 16:56:44 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 16:56:44 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 16:56:44 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 16:56:44 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 16:56:44 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 16:56:45 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 16:56:45 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 16:56:45 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 16:56:45 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49719	20.190.177.22	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:45 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-25 16:56:45 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-25 16:56:45 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Mon, 25 Nov 2024 16:55:45 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C512_BL2 x-ms-request-id: fe6a06de-27f5-4e44-93a4-e67706151a3e PPServer: PPV: 30 H: BL02EPF000276B9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Mon, 25 Nov 2024 16:56:45 GMT Connection: close Content-Length: 11409
2024-11-25 16:56:45 UTC	11409	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:47 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:47 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8db92378-201e-003f-2cbf-3e6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165647Z-178bfbc474bp8mkvhC1NYCzqnn00000007f000000000v2qw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:47 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:47 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:47 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b200d60e-301e-0033-2331-3efa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165647Z-15b8b599d88hd9g7hC1TEBp75c000000066g00000000a4ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:47 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:47 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:47 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165647Z-178bfbc474bnwsh4hC1NYC2ubs00000007qg00000000svwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:47 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:47 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:47 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 44ae66ae-301e-001f-7627-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165647Z-15b8b599d88hd9g7hC1TEBp75c000000069g000000000fht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:47 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:47 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:47 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165647Z-178bfbc474bh5zbqhC1NYCkdug00000007n000000000kuay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49736	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:49 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+sKDTGr+xuGkknW&MD=XHUmss4+ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 16:56:50 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: dcf70eb9-6e19-493c-b225-0b0f286345ed MS-RequestId: 28be48cf-8e37-42af-af35-be1264fd8ee4 MS-CV: oheuby2LNk2tmq4q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 16:56:48 GMT Connection: close Content-Length: 24490
2024-11-25 16:56:50 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 16:56:50 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:49 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165649Z-178bfbc474bwh9gmhC1NYCy3rs00000007s000000000n44k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:49 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 9b21b011-b01e-0021-05fc-3ecab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165649Z-174c587ffdfcj798hC1TEB9bq400000006a000000000r75p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:49 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 65361fd5-201e-0033-283f-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165649Z-15b8b599d88tmlzshC1TEB4xpn000000064g00000000940g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:49 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165649Z-15b8b599d88cn5thhC1TEBqxkn000000060g00000000q242 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:50 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:49 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:49 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: b54876a2-a01e-0070-6764-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165649Z-178bfbc474bq2pr7hC1NYCkfgg00000007tg00000000ppkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:50 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49744	2.20.204.113	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 16:56:50 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=59765 Date: Mon, 25 Nov 2024 16:56:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165652Z-15b8b599d889gj5whC1TEBfyk00000000630000000006nn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:51 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c38a0343-101e-008e-38bf-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165652Z-178bfbc474bq2pr7hC1NYCkfgg00000007z0000000004bu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 922c5f4e-601e-005c-577c-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165652Z-174c587ffdfgcs66hC1TEB69cs000000061000000000m0vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:52 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:52 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165652Z-178bfbc474bfw4gbhC1NYCunf400000007rg00000000f2zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:52 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165652Z-178bfbc474bpscmfhC1NYCfc2c00000006a000000000g7z5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49750	2.20.204.113	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 16:56:53 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=59792 Date: Mon, 25 Nov 2024 16:56:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 16:56:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49755	205.139.111.117	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:53 UTC	727	OUT	GET /s/bsrcCxkw9pCLRZmZS8foHypG0I?domain=sherwin.cw1.ro HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:56:54 UTC	3245	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 25 Nov 2024 16:56:54 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/i8y2r7ZsgyInosyoQR7z1Aiw5oRPpAGnbzcNYkwt_nR-NedUWV6D3xovyi2pcXUHYYsEGB7I5HkHAUuX1qr5c7LNS0pD3cPEjfdxVHk7wlGWcn_q_zEE4xmTxjVf4SHy98XMsK-E6xcsuUas-55gBKXdKTOx7RL9FxYkLl4IGKrHLjhoraBFy58bt8BRawBVBkXSvBKEemVsi83E5tnydAyD_eDXPlX0Uco4gOeglyn5z3o9oOWoea9RbLAeREW4iHRajynUuR9VIoIir7xd3opO-hUuJujLCyg-HyPX3a5bTe7nbxde87B51PrSEs7i4iIRHAUZ2pXU6fQRCXv9o4X57RxtAb8wi-57VIC4NqB6y4GR-R9E0lDt-OlKBbk73WdHoFE4BqcXRZ_HkNZnaZFDgzsUNwCgpSjU_nznMBMgsOxpI_IYeWjjIeS4vACiGosEBMZCBih3jACJMJbzDamukId7ZGXHlOtODCJqgrlYvAjPaY_5w-wOdlEcpe9HVPaMHJXKV2pOIoLp3ui58lmhVh1AnnyDOgsdDU7xnQ5EQTJIC--o7wlXs2VJEyLB2eFTQu9kTgyvNOf1jBEJxYrolvRzp7P-Qq7Fs4qS1D9gAapr0pundMq1Wr0U76ao0d73DjPEd1YSVEZnbVQHYu5N_PI9B31vQZPNjqeAKp_qD3Lr5DbL6Mm_xH8Zy_RyrXldNJWRImMbWmv2H_-qPXKZAZpLHB8eHTWTov4q8yV4JLjExpzbNtG-3FCEqWrigAumI2mO88txIkL_7gEYhe6vxwa3tlSnK0aqEoFgGvTKLBY2M4tinASSa6-WvXr_pEiaO5FMDI--JZEMuxPpVbbhD6f7wf4-cqxIJQI_qVTqSmhg1zu-2zpe3KBlLTGkY_kaz75o08_VemYmEZg4ovmf5CAcrYNkat7A0cI56-QD5mDvyxF1Jv9l5uz2-QSXIndWeP3oepHi9Vm [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: ba5d631a-801e-0047-14d1-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165654Z-178bfbc474bnwsh4hC1NYC2ubs00000007rg00000000p6ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 000c37a0-d01e-002b-0920-3d25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165654Z-15b8b599d8885prmhC1TEBsnkw00000006dg0000000035mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49754	205.139.111.117	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	3687	OUT	GET /r/i8y2r7ZsgyInosyoQR7z1Aiw5oRPpAGnbzcNYkwt_nR-NedUWV6D3xovyi2pcXUHYYsEGB7I5HkHAUuX1qr5c7LNS0pD3cPEjfdxVHk7wlGWcn_q_zEE4xmTxjVf4SHy98XMsK-E6xcsuUas-55gBKXdKTOx7RL9FxYkLl4IGKrHLjhoraBFy58bt8BRawBVBkXSvBKEemVsi83E5tnydAyD_eDXPlX0Uco4gOeglyn5z3o9oOWoea9RbLAeREW4iHRajynUuR9VIoIir7xd3opO-hUuJujLCyg-HyPX3a5bTe7nbxde87B51PrSEs7i4iIRHAUZ2pXU6fQRCXv9o4X57RxtAb8wi-57VIC4NqB6y4GR-R9E0lDt-OlKBbk73WdHoFE4BqcXRZ_HkNZnaZFDgzsUNwCgpSjU_nznMBMgsOxpI_IYeWjjIeS4vACiGosEBMZCBih3jACJMJbzDamukId7ZGXHlOtODCJqgrlYvAjPaY_5w-wOdlEcpe9HVPaMHJXKV2pOIoLp3ui58lmhVh1AnnyDOgsdDU7xnQ5EQTJIC--o7wlXs2VJEyLB2eFTQu9kTgyvNOf1jBEJxYrolvRzp7P-Qq7Fs4qS1D9gAapr0pundMq1Wr0U76ao0d73DjPEd1YSVEZnbVQHYu5N_PI9B31vQZPNjqeAKp_qD3Lr5DbL6Mm_xH8Zy_RyrXldNJWRImMbWmv2H_-qPXKZAZpLHB8eHTWTov4q8yV4JLjExpzbNtG-3FCEqWrigAumI2mO88txIkL_7gEYhe6vxwa3tlSnK0aqEoFgGvTKLBY2M4tinASSa6-WvXr_pEiaO5FMDI--JZEMuxPpVbbhD6f7wf4-cqxIJQI_qVTqSmhg1zu-2zpe3KBlLTGkY_kaz75o08_VemYmEZg4ovmf5CAcrYNkat7A0cI56-QD5mDvyxF1Jv9l5uz2-QSXIndWeP3oepHi9VmzrW932885xrAM6yCK77oh9KD6fiL6jIfERs1Zs00Ps [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49752	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 36 53 33 4f 50 6a 75 43 62 6b 79 45 7a 38 6a 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 62 63 65 64 36 33 63 39 65 63 32 31 33 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 6S3OPjuCbkyEz8jl.1Context: 9abced63c9ec2138
2024-11-25 16:56:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:56:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 36 53 33 4f 50 6a 75 43 62 6b 79 45 7a 38 6a 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 62 63 65 64 36 33 63 39 65 63 32 31 33 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 55 6c 6e 71 35 78 32 46 2b 77 77 53 51 42 47 37 44 42 6e 42 74 6e 4e 70 4c 7a 6b 66 69 59 66 49 7a 65 78 71 7a 6d 55 56 57 32 43 4d 71 52 55 6a 79 44 76 63 36 62 6e 77 43 4a 34 49 67 69 79 55 32 2f 66 61 71 30 44 6b 50 6d 43 6e 39 48 46 55 42 6f 56 33 77 67 6e 68 62 47 76 71 30 65 6a 41 2b 38 72 4e 38 49 67 76 31 52 58 41 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 6S3OPjuCbkyEz8jl.2Context: 9abced63c9ec2138<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATUlnq5x2F+wwSQBG7DBnBtnNpLzkfiYfIzexqzmUVW2CMqRUjyDvc6bnwCJ4IgiyU2/faq0DkPmCn9HFUBoV3wgnhbGvq0ejA+8rN8Igv1RXA
2024-11-25 16:56:54 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 36 53 33 4f 50 6a 75 43 62 6b 79 45 7a 38 6a 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 62 63 65 64 36 33 63 39 65 63 32 31 33 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: 6S3OPjuCbkyEz8jl.3Context: 9abced63c9ec2138
2024-11-25 16:56:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:56:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 62 65 78 70 76 4b 56 71 55 32 7a 31 4c 50 48 52 61 79 6d 6b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ibexpvKVqU2z1LPHRaymkQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:54 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4834b854-301e-005d-3ab8-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165654Z-178bfbc474bpnd5vhC1NYC4vr400000007u0000000004d5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:55 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49753	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 6f 67 6c 32 78 70 54 45 45 79 65 35 67 57 41 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 34 35 32 30 63 31 61 30 64 64 64 34 37 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rogl2xpTEEye5gWA.1Context: f54520c1a0ddd479
2024-11-25 16:56:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:56:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 6f 67 6c 32 78 70 54 45 45 79 65 35 67 57 41 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 34 35 32 30 63 31 61 30 64 64 64 34 37 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 50 59 33 4e 69 42 4e 68 4c 4f 70 33 53 6c 77 42 4d 49 41 34 4f 79 6a 45 73 59 57 39 63 54 42 6f 45 4c 51 6d 49 68 56 55 59 6a 61 54 41 69 43 62 78 37 68 48 6b 44 72 70 71 4c 6d 71 74 51 73 52 6e 72 49 30 74 38 73 4c 77 78 77 54 48 77 6b 30 5a 66 4d 70 35 55 72 66 78 74 7a 4e 68 2f 30 75 67 32 61 52 2f 44 51 61 48 38 78 6a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: rogl2xpTEEye5gWA.2Context: f54520c1a0ddd479<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUPY3NiBNhLOp3SlwBMIA4OyjEsYW9cTBoELQmIhVUYjaTAiCbx7hHkDrpqLmqtQsRnrI0t8sLwxwTHwk0ZfMp5UrfxtzNh/0ug2aR/DQaH8xj
2024-11-25 16:56:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 6f 67 6c 32 78 70 54 45 45 79 65 35 67 57 41 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 34 35 32 30 63 31 61 30 64 64 64 34 37 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rogl2xpTEEye5gWA.3Context: f54520c1a0ddd479<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 16:56:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:56:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 7a 4b 39 6c 73 71 67 63 30 36 67 33 37 74 34 74 56 36 6f 37 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +zK9lsqgc06g37t4tV6o7w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:54 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 3257ccc0-201e-005d-19b5-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165654Z-178bfbc474bgvl54hC1NYCsfuw00000007m000000000uvg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:55 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:54 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:55 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e328efd5-c01e-00a2-56bf-3e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165655Z-178bfbc474btrnf9hC1NYCb80g00000007tg00000000sn3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:55 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:57 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 40d9340c-a01e-0050-06b8-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165657Z-178bfbc474b9xljthC1NYCtw9400000007ng00000000f3p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:57 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 54e83703-c01e-00a1-7d1b-3e7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165657Z-178bfbc474bnwsh4hC1NYC2ubs00000007w0000000006d2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:57 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b12c7864-501e-007b-43bf-3e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165657Z-178bfbc474b9xljthC1NYCtw9400000007pg00000000bfem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:57 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:57 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 876ff6fa-901e-00a0-47eb-3d6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165657Z-178bfbc474btrnf9hC1NYCb80g0000000800000000000tpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:57 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:57 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:56:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:56:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: fe481865-f01e-0085-1c04-3f88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165657Z-15b8b599d88qw29phC1TEB5zag000000063g00000000qm1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:56:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:59 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 8017546c-101e-000b-4720-3d5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165700Z-178bfbc474b9fdhphC1NYCac0n00000007qg000000009gmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:59 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: aaf2b452-f01e-0071-621c-3e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165700Z-178bfbc474btvfdfhC1NYCa2en00000007r000000000rhqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:00 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:59 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 15a67567-d01e-0066-07eb-3bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165700Z-15b8b599d882l6clhC1TEBxd5c000000063000000000dwaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:59 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 5aac375c-301e-005d-2f0e-3ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165700Z-15b8b599d889gj5whC1TEBfyk0000000061g00000000bz71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:56:59 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 375df28d-601e-00ab-5b0b-3d66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165700Z-178bfbc474b9xljthC1NYCtw9400000007rg000000003b0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: fe2375f7-e01e-0052-5cea-3ed9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165702Z-15b8b599d8885prmhC1TEBsnkw00000006dg00000000362w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 64264af0-501e-005b-1fb0-3dd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165702Z-174c587ffdfcb7qhhC1TEB3x70000000069000000000er28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 279fb768-d01e-00ad-04d6-3ee942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165702Z-15b8b599d88g5tp8hC1TEByx6w000000066000000000cp4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 20caaba8-701e-005c-0363-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165702Z-178bfbc474bq2pr7hC1NYCkfgg00000007zg0000000025aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:02 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:02 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 043e45ca-501e-0078-1031-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165702Z-178bfbc474bvjk8shC1NYC83ns00000007gg00000000p6zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:02 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49781	205.139.111.117	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:02 UTC	727	OUT	GET /s/bsrcCxkw9pCLRZmZS8foHypG0I?domain=sherwin.cw1.ro HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:03 UTC	3245	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 25 Nov 2024 16:57:02 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/i8y2r7ZsgyInosyoQR7z1Aiw5oRPpAGnbzcNYkwt_nR-NedUWV6D3xovyi2pcXUHYYsEGB7I5HkHAUuX1qr5c7LNS0pD3cPEjfdxVHk7wlGWcn_q_zEE4xmTxjVf4SHy98XMsK-E6xcsuUas-55gBKXdKTOx7RL9FxYkLl4IGKrHLjhoraBFy58bt8BRawBVBkXSvBKEemVsi83E5tnydAyD_eDXPlX0Uco4gOeglyn5z3o9oOWoea9RbLAeREW4iHRajynUuR9VIoIir7xd3opO-hUuJujLCyg-HyPX3a5bTe7nbxde87B51PrSEs7i4iIRHAUZ2pXU6fQRCXv9o4X57RxtAb8wi-57VIC4NqB6y4GR-R9E0lDt-OlKBbk73WdHoFE4BqcXRZ_HkNZnaZFDgzsUNwCgpSjU_nznMBMgsOxpI_IYeWjjIeS4vACiGosEBMZCBih3jACJMJbzDamukId7ZGXHlOtODCJqgrlYvAjPaY_5w-wOdlEcpe9HVPaMHJXKV2pOIoLp3ui58lmhVh1AnnyDOgsdDU7xnQ5EQTJIC--o7wlXs2VJEyLB2eFTQu9kTgyvNOf1jBEJxYrolvRzp7P-Qq7Fs4qS1D9gAapr0pundMq1Wr0U76ao0d73DjPEd1YSVEZnbVQHYu5N_PI9B31vQZPNjqeAKp_qD3Lr5DbL6Mm_xH8Zy_RyrXldNJWRImMbWmv2H_-qPXKZAZpLHB8eHTWTov4q8yV4JLjExpzbNtG-3FCEqWrigAumI2mO88txIkL_7gEYhe6vxwa3tlSnK0aqEoFgGvTKLBY2M4tinASSa6-WvXr_pEiaO5FMDI--JZEMuxPpVbbhD6f7wf4-cqxIJQI_qVTqSmhg1zu-2zpe3KBlLTGkY_kaz75o08_VemYmEZg4ovmf5CAcrYNkat7A0cI56-QD5mDvyxF1Jv9l5uz2-QSXIndWeP3oepHi9Vm [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49780	205.139.111.117	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:03 UTC	3687	OUT	GET /r/i8y2r7ZsgyInosyoQR7z1Aiw5oRPpAGnbzcNYkwt_nR-NedUWV6D3xovyi2pcXUHYYsEGB7I5HkHAUuX1qr5c7LNS0pD3cPEjfdxVHk7wlGWcn_q_zEE4xmTxjVf4SHy98XMsK-E6xcsuUas-55gBKXdKTOx7RL9FxYkLl4IGKrHLjhoraBFy58bt8BRawBVBkXSvBKEemVsi83E5tnydAyD_eDXPlX0Uco4gOeglyn5z3o9oOWoea9RbLAeREW4iHRajynUuR9VIoIir7xd3opO-hUuJujLCyg-HyPX3a5bTe7nbxde87B51PrSEs7i4iIRHAUZ2pXU6fQRCXv9o4X57RxtAb8wi-57VIC4NqB6y4GR-R9E0lDt-OlKBbk73WdHoFE4BqcXRZ_HkNZnaZFDgzsUNwCgpSjU_nznMBMgsOxpI_IYeWjjIeS4vACiGosEBMZCBih3jACJMJbzDamukId7ZGXHlOtODCJqgrlYvAjPaY_5w-wOdlEcpe9HVPaMHJXKV2pOIoLp3ui58lmhVh1AnnyDOgsdDU7xnQ5EQTJIC--o7wlXs2VJEyLB2eFTQu9kTgyvNOf1jBEJxYrolvRzp7P-Qq7Fs4qS1D9gAapr0pundMq1Wr0U76ao0d73DjPEd1YSVEZnbVQHYu5N_PI9B31vQZPNjqeAKp_qD3Lr5DbL6Mm_xH8Zy_RyrXldNJWRImMbWmv2H_-qPXKZAZpLHB8eHTWTov4q8yV4JLjExpzbNtG-3FCEqWrigAumI2mO88txIkL_7gEYhe6vxwa3tlSnK0aqEoFgGvTKLBY2M4tinASSa6-WvXr_pEiaO5FMDI--JZEMuxPpVbbhD6f7wf4-cqxIJQI_qVTqSmhg1zu-2zpe3KBlLTGkY_kaz75o08_VemYmEZg4ovmf5CAcrYNkat7A0cI56-QD5mDvyxF1Jv9l5uz2-QSXIndWeP3oepHi9VmzrW932885xrAM6yCK77oh9KD6fiL6jIfERs1Zs00Ps [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:04 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: b7a4c0f2-401e-0064-554c-3c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165704Z-15b8b599d88vp97chC1TEB5pzw0000000690000000002xhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:04 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:04 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165704Z-178bfbc474b7cbwqhC1NYC8z4n00000007q0000000008dx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:04 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:04 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: a7985a29-001e-0046-374c-3cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165704Z-15b8b599d88pxmdghC1TEBux9c00000006a000000000f5vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:04 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: e845eaf5-101e-008e-5d91-3bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165704Z-15b8b599d88s6mj9hC1TEBur30000000064g000000001mtp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:04 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:04 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: e42c2868-f01e-003f-5826-3dd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165704Z-15b8b599d88m7pn7hC1TEB4axw00000006bg000000002351 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 974535d3-001e-002b-30bf-3e99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165707Z-178bfbc474bw8bwphC1NYC38b400000007kg00000000cp83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:07 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ecf1de78-401e-0047-5d4b-3c8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165707Z-15b8b599d88s6mj9hC1TEBur3000000005z000000000n8rk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: af6ae163-c01e-0082-6735-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165707Z-178bfbc474bwh9gmhC1NYCy3rs00000007tg00000000fkc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:07 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165707Z-178bfbc474bpnd5vhC1NYC4vr400000007q000000000kwqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:07 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:06 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:07 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: ea4907c4-101e-0079-4064-3d5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165707Z-174c587ffdftv9hphC1TEBm29w000000062g00000000q35x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:07 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:09 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77e83d57-401e-0016-5857-3c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165709Z-15b8b599d88phfhnhC1TEBr51n00000006c00000000096bz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:09 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:09 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165709Z-174c587ffdfks6tlhC1TEBeza4000000068000000000kf6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:09 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:09 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 3074f9d5-701e-001e-47fc-3df5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165709Z-178bfbc474bq2pr7hC1NYCkfgg00000007zg0000000025sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:09 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 732016c8-001e-000b-7fb8-3e15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165709Z-178bfbc474bwh9gmhC1NYCy3rs00000007xg0000000010p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:09 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:09 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: c388be8e-101e-008e-2ebf-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165709Z-178bfbc474bvjk8shC1NYC83ns00000007f000000000urn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:09 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49799	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4f 32 4b 50 49 30 72 52 45 30 4f 5a 71 4b 4b 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 33 37 32 65 61 62 33 66 36 63 38 30 35 37 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: O2KPI0rRE0OZqKKB.1Context: 2372eab3f6c8057d
2024-11-25 16:57:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:57:10 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4f 32 4b 50 49 30 72 52 45 30 4f 5a 71 4b 4b 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 33 37 32 65 61 62 33 66 36 63 38 30 35 37 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 55 6c 6e 71 35 78 32 46 2b 77 77 53 51 42 47 37 44 42 6e 42 74 6e 4e 70 4c 7a 6b 66 69 59 66 49 7a 65 78 71 7a 6d 55 56 57 32 43 4d 71 52 55 6a 79 44 76 63 36 62 6e 77 43 4a 34 49 67 69 79 55 32 2f 66 61 71 30 44 6b 50 6d 43 6e 39 48 46 55 42 6f 56 33 77 67 6e 68 62 47 76 71 30 65 6a 41 2b 38 72 4e 38 49 67 76 31 52 58 41 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: O2KPI0rRE0OZqKKB.2Context: 2372eab3f6c8057d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATUlnq5x2F+wwSQBG7DBnBtnNpLzkfiYfIzexqzmUVW2CMqRUjyDvc6bnwCJ4IgiyU2/faq0DkPmCn9HFUBoV3wgnhbGvq0ejA+8rN8Igv1RXA
2024-11-25 16:57:10 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4f 32 4b 50 49 30 72 52 45 30 4f 5a 71 4b 4b 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 33 37 32 65 61 62 33 66 36 63 38 30 35 37 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: O2KPI0rRE0OZqKKB.3Context: 2372eab3f6c8057d
2024-11-25 16:57:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:57:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 76 2b 32 4b 37 41 57 6e 32 55 65 6c 36 51 79 62 65 47 47 50 33 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: v+2K7AWn2Uel6QybeGGP3A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49800	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 38 79 77 77 76 49 34 76 6f 55 32 55 76 54 55 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 36 62 37 30 34 36 35 33 38 64 63 66 31 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 8ywwvI4voU2UvTUS.1Context: fc6b7046538dcf18
2024-11-25 16:57:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:57:10 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 38 79 77 77 76 49 34 76 6f 55 32 55 76 54 55 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 36 62 37 30 34 36 35 33 38 64 63 66 31 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 50 59 33 4e 69 42 4e 68 4c 4f 70 33 53 6c 77 42 4d 49 41 34 4f 79 6a 45 73 59 57 39 63 54 42 6f 45 4c 51 6d 49 68 56 55 59 6a 61 54 41 69 43 62 78 37 68 48 6b 44 72 70 71 4c 6d 71 74 51 73 52 6e 72 49 30 74 38 73 4c 77 78 77 54 48 77 6b 30 5a 66 4d 70 35 55 72 66 78 74 7a 4e 68 2f 30 75 67 32 61 52 2f 44 51 61 48 38 78 6a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 8ywwvI4voU2UvTUS.2Context: fc6b7046538dcf18<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUPY3NiBNhLOp3SlwBMIA4OyjEsYW9cTBoELQmIhVUYjaTAiCbx7hHkDrpqLmqtQsRnrI0t8sLwxwTHwk0ZfMp5UrfxtzNh/0ug2aR/DQaH8xj
2024-11-25 16:57:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 38 79 77 77 76 49 34 76 6f 55 32 55 76 54 55 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 36 62 37 30 34 36 35 33 38 64 63 66 31 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 8ywwvI4voU2UvTUS.3Context: fc6b7046538dcf18<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 16:57:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:57:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 76 79 59 78 32 67 35 6b 36 30 53 4e 71 31 6f 64 65 67 54 59 34 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: vyYx2g5k60SNq1odegTY4w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49806	205.139.111.117	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:11 UTC	727	OUT	GET /s/bsrcCxkw9pCLRZmZS8foHypG0I?domain=sherwin.cw1.ro HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:11 UTC	3245	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 25 Nov 2024 16:57:11 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/i8y2r7ZsgyInosyoQR7z1Aiw5oRPpAGnbzcNYkwt_nR-NedUWV6D3xovyi2pcXUHYYsEGB7I5HkHAUuX1qr5c7LNS0pD3cPEjfdxVHk7wlGWcn_q_zEE4xmTxjVf4SHy98XMsK-E6xcsuUas-55gBKXdKTOx7RL9FxYkLl4IGKrHLjhoraBFy58bt8BRawBVBkXSvBKEemVsi83E5tnydAyD_eDXPlX0Uco4gOeglyn5z3o9oOWoea9RbLAeREW4iHRajynUuR9VIoIir7xd3opO-hUuJujLCyg-HyPX3a5bTe7nbxde87B51PrSEs7i4iIRHAUZ2pXU6fQRCXv9o4X57RxtAb8wi-57VIC4NqB6y4GR-R9E0lDt-OlKBbk73WdHoFE4BqcXRZ_HkNZnaZFDgzsUNwCgpSjU_nznMBMgsOxpI_IYeWjjIeS4vACiGosEBMZCBih3jACJMJbzDamukId7ZGXHlOtODCJqgrlYvAjPaY_5w-wOdlEcpe9HVPaMHJXKV2pOIoLp3ui58lmhVh1AnnyDOgsdDU7xnQ5EQTJIC--o7wlXs2VJEyLB2eFTQu9kTgyvNOf1jBEJxYrolvRzp7P-Qq7Fs4qS1D9gAapr0pundMq1Wr0U76ao0d73DjPEd1YSVEZnbVQHYu5N_PI9B31vQZPNjqeAKp_qD3Lr5DbL6Mm_xH8Zy_RyrXldNJWRImMbWmv2H_-qPXKZAZpLHB8eHTWTov4q8yV4JLjExpzbNtG-3FCEqWrigAumI2mO88txIkL_7gEYhe6vxwa3tlSnK0aqEoFgGvTKLBY2M4tinASSa6-WvXr_pEiaO5FMDI--JZEMuxPpVbbhD6f7wf4-cqxIJQI_qVTqSmhg1zu-2zpe3KBlLTGkY_kaz75o08_VemYmEZg4ovmf5CAcrYNkat7A0cI56-QD5mDvyxF1Jv9l5uz2-QSXIndWeP3oepHi9Vm [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:11 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6b17e566-f01e-003f-7a44-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165711Z-15b8b599d882l6clhC1TEBxd5c000000064000000000akvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:11 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 4a2b4f75-b01e-0084-04e2-3dd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165711Z-174c587ffdfmrvb9hC1TEBtn38000000062g000000010cuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:11 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: ba3424f4-801e-0047-3bbf-3e7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165711Z-178bfbc474bxkclvhC1NYC69g400000007n000000000hz23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:11 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0fd64145-d01e-0028-790a-3d7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165711Z-178bfbc474b9xljthC1NYCtw9400000007qg000000007aqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49807	205.139.111.117	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:11 UTC	3687	OUT	GET /r/i8y2r7ZsgyInosyoQR7z1Aiw5oRPpAGnbzcNYkwt_nR-NedUWV6D3xovyi2pcXUHYYsEGB7I5HkHAUuX1qr5c7LNS0pD3cPEjfdxVHk7wlGWcn_q_zEE4xmTxjVf4SHy98XMsK-E6xcsuUas-55gBKXdKTOx7RL9FxYkLl4IGKrHLjhoraBFy58bt8BRawBVBkXSvBKEemVsi83E5tnydAyD_eDXPlX0Uco4gOeglyn5z3o9oOWoea9RbLAeREW4iHRajynUuR9VIoIir7xd3opO-hUuJujLCyg-HyPX3a5bTe7nbxde87B51PrSEs7i4iIRHAUZ2pXU6fQRCXv9o4X57RxtAb8wi-57VIC4NqB6y4GR-R9E0lDt-OlKBbk73WdHoFE4BqcXRZ_HkNZnaZFDgzsUNwCgpSjU_nznMBMgsOxpI_IYeWjjIeS4vACiGosEBMZCBih3jACJMJbzDamukId7ZGXHlOtODCJqgrlYvAjPaY_5w-wOdlEcpe9HVPaMHJXKV2pOIoLp3ui58lmhVh1AnnyDOgsdDU7xnQ5EQTJIC--o7wlXs2VJEyLB2eFTQu9kTgyvNOf1jBEJxYrolvRzp7P-Qq7Fs4qS1D9gAapr0pundMq1Wr0U76ao0d73DjPEd1YSVEZnbVQHYu5N_PI9B31vQZPNjqeAKp_qD3Lr5DbL6Mm_xH8Zy_RyrXldNJWRImMbWmv2H_-qPXKZAZpLHB8eHTWTov4q8yV4JLjExpzbNtG-3FCEqWrigAumI2mO88txIkL_7gEYhe6vxwa3tlSnK0aqEoFgGvTKLBY2M4tinASSa6-WvXr_pEiaO5FMDI--JZEMuxPpVbbhD6f7wf4-cqxIJQI_qVTqSmhg1zu-2zpe3KBlLTGkY_kaz75o08_VemYmEZg4ovmf5CAcrYNkat7A0cI56-QD5mDvyxF1Jv9l5uz2-QSXIndWeP3oepHi9VmzrW932885xrAM6yCK77oh9KD6fiL6jIfERs1Zs00Ps [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:12 UTC	437	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 25 Nov 2024 16:57:12 GMT Content-Length: 0 Connection: close Location: https://security-us.m.mimecastprotect.com/ttpwp#/block?key=x7LPR3m-tEws89GPpZtaqw28dRJkvhPSwzzaeRJ8baXY7p6UT3F_NoK3_Q87YkhV2MzMYv1jLtabRzJ7RhMscaKZxUM3A6pzbVcHP_q9wpI Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:14 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 6ed2b457-801e-00a0-465b-3f2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165714Z-178bfbc474bp8mkvhC1NYCzqnn00000007k000000000eykz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-25 16:57:14 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 096488c1-001e-0046-44af-3eda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165714Z-15b8b599d885v8r9hC1TEB104g000000068000000000e0n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:14 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 43d09947-101e-005a-2421-3c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165714Z-178bfbc474bwh9gmhC1NYCy3rs00000007tg00000000fkp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:14 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:13 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ea7a0cbc-701e-001e-589c-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165714Z-178bfbc474bbbqrhhC1NYCvw7400000007tg00000000sw0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49812	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:14 UTC	687	OUT	GET /ttpwp HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:14 UTC	434	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"d77-JdL/eOsS7z2yo5B+jSzjnBxVBdk" Vary: Accept-Encoding
2024-11-25 16:57:14 UTC	3447	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no, maximum-scale=1, minimum-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:14 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1e280d2f-401e-0029-0d7f-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165714Z-174c587ffdfldtt2hC1TEBwv9c0000000640000000004173 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49820	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	545	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:16 UTC	533	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:16 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 40f78568-a01e-0050-01c6-3edb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165716Z-178bfbc474bfw4gbhC1NYCunf400000007pg00000000r1dq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:16 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 0ecd932e-001e-0066-5d4b-3c561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165716Z-15b8b599d88hr8sfhC1TEBbca4000000061g00000000hp0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 606a4207-501e-005b-157e-3bd7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165716Z-174c587ffdfgcs66hC1TEB69cs000000065g000000000usf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 58fc3879-a01e-0084-3e17-3f9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165716Z-15b8b599d88n8stkhC1TEBb78n000000010000000000n7tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49819	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	547	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:16 UTC	536	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:16 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-11-25 16:57:17 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49817	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	544	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:17 UTC	537	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:17 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-11-25 16:57:17 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49818	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	542	OUT	GET /ttpwp/resources/main.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:17 UTC	437	IN	HTTP/1.1 404 Not Found Date: Mon, 25 Nov 2024 16:57:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding
2024-11-25 16:57:17 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:16 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: edaf41ae-201e-0051-5e49-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165717Z-174c587ffdf4zw2thC1TEBu34000000006cg000000000z8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:18 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 93d7ba64-801e-002a-7fce-3b31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165718Z-15b8b599d88vp97chC1TEB5pzw000000063g00000000p8ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:18 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e2ff131b-f01e-0085-7676-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165718Z-174c587ffdf59vqchC1TEByk6800000006bg00000000em28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:18 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 23cbbb45-601e-0084-4e3d-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165718Z-15b8b599d88l2dpthC1TEBmzr0000000068g000000002psm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:19 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:18 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8d306870-001e-0049-49bf-3e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165718Z-178bfbc474bw8bwphC1NYC38b400000007gg00000000mx66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49827	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:18 UTC	404	OUT	GET /ttpwp/resources/runtime.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:18 UTC	533	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1492 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"5d4-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:18 UTC	1492	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6c 2c 70 3d 72 5b 30 5d 2c 66 3d 72 5b 31 5d 2c 69 3d 72 5b 32 5d 2c 63 3d 30 2c 73 3d 5b 5d 3b 63 3c 70 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 70 5b 63 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 6c 29 26 26 6f 5b 6c 5d 26 26 73 2e 70 75 73 68 28 6f 5b 6c 5d 5b 30 5d 29 2c 6f 5b 6c 5d 3d 30 3b 66 6f 72 28 6e 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 66 2c 6e 29 26 26 28 65 5b 6e 5d 3d 66 5b 6e 5d 29 3b 66 6f 72 28 61 26 26 61 28 72 29 3b 73 2e 6c 65 6e 67 74 68 3b 29 73 2e 73 68 Data Ascii: !function(e){function r(r){for(var n,l,p=r[0],f=r[1],i=r[2],c=0,s=[];c<p.length;c++)l=p[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in f)Object.prototype.hasOwnProperty.call(f,n)&&(e[n]=f[n]);for(a&&a(r);s.length;)s.sh

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9a5c0c24-501e-0064-106e-3c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165719Z-174c587ffdfb5q56hC1TEB04kg000000064g00000000d8yp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49829	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	406	OUT	GET /ttpwp/resources/polyfills.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:19 UTC	536	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95292 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"1743c-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:19 UTC	15848	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 30 54 57 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 69 2c 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"0TWp":function(e,t,n){"use strict";var r,i,o=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,o=t.length;i<o;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,
2024-11-25 16:57:19 UTC	16384	IN	Data Raw: 61 72 20 74 3d 65 26 26 65 2e 72 65 6a 65 63 74 69 6f 6e 3b 74 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 6d 65 73 73 61 67 65 3a 74 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 65 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 65 2e 74 61 73 6b 26 26 65 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 74 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 74 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 2c 6e 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: ar t=e&&e.rejection;t?console.error("Unhandled Promise rejection:",t instanceof Error?t.message:t,"; Zone:",e.zone.name,"; Task:",e.task&&e.task.source,"; Value:",t,t instanceof Error?t.stack:void 0):console.error(e)}},n.microtaskDrainDone=function(){for(
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 69 70 74 2c 53 65 6c 65 63 74 2c 53 6f 75 72 63 65 2c 53 70 61 6e 2c 53 74 79 6c 65 2c 54 61 62 6c 65 43 61 70 74 69 6f 6e 2c 54 61 62 6c 65 43 65 6c 6c 2c 54 61 62 6c 65 43 6f 6c 2c 54 61 62 6c 65 2c 54 61 62 6c 65 52 6f 77 2c 54 61 62 6c 65 53 65 63 74 69 6f 6e 2c 54 65 78 74 41 72 65 61 2c 54 69 74 6c 65 2c 54 72 61 63 6b 2c 55 4c 69 73 74 2c 55 6e 6b 6e 6f 77 6e 2c 56 69 64 65 6f 22 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 3f 6c 3d 68 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 54 4d 4c 22 2b 65 2b 22 45 6c 65 6d 65 6e 74 22 7d 29 2e 63 6f 6e 63 61 74 28 75 29 3a 65 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 6c 2e 70 75 73 68 28 22 45 76 65 6e 74 54 61 72 67 65 74 22 29 3a 6c 3d 75 3b 66 6f 72 28 76 61 72 20 70 3d 65 2e 5f 5f Data Ascii: ipt,Select,Source,Span,Style,TableCaption,TableCell,TableCol,Table,TableRow,TableSection,TextArea,Title,Track,UList,Unknown,Video".split(",");f?l=h.map(function(e){return"HTML"+e+"Element"}).concat(u):e.EventTarget?l.push("EventTarget"):l=u;for(var p=e.__
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 6e 67 20 69 6e 70 75 74 73 22 2c 22 32 30 31 36 2d 30 33 2d 30 32 22 2c 22 54 79 70 65 45 72 72 6f 72 20 65 78 63 65 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 74 68 72 6f 77 6e 20 69 6e 73 74 65 61 64 2e 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 3b 72 65 74 75 72 6e 20 72 26 26 28 6f 2e 66 Data Ascii: s._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=h}function r(){return e.isDeprecated("Invalid timing inputs","2016-03-02","TypeError exceptions will be thrown instead.",!0)}function i(t,r,i){var o=new n;return r&&(o.f
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 74 2a 28 31 2d 72 29 2b 6e 2a 72 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 72 3c 2e 35 3f 74 3a 6e 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 6e 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2e 70 75 73 68 28 65 28 74 5b 6f 5d 2c 6e 5b 6f 5d 2c 72 29 29 3b 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 22 4d 69 73 6d 61 74 63 Data Ascii: ion(r){return n(function e(t,n,r){if("number"==typeof t&&"number"==typeof n)return t(1-r)+nr;if("boolean"==typeof t&&"boolean"==typeof n)return r<.5?t:n;if(t.length==n.length){for(var i=[],o=0;o<t.length;o++)i.push(e(t[o],n[o],r));return i}throw"Mismatc
2024-11-25 16:57:20 UTC	13908	IN	Data Raw: 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 5b 69 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 28 72 28 65 2c 74 2c 69 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 2f 5c 73 2a 5b 5c 73 2c 5d 5c 73 2a 2f 29 3b 69 66 28 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 69 28 74 5b 72 5d 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 6e 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 7d 65 2e 63 6c 61 6d 70 3d 72 2c 65 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e Data Ascii: (e,t){return function(i,o){return[i,o,function(i){return n(r(e,t,i))}]}}function a(e){var t=e.trim().split(/\s[\s,]\s/);if(0!==t.length){for(var n=[],r=0;r<t.length;r++){var o=i(t[r]);if(void 0===o)return;n.push(o)}return n}}e.clamp=r,e.addPropertiesHan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49830	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	592	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:20 UTC	508	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:20 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:20 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49831	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:19 UTC	403	OUT	GET /ttpwp/resources/styles.5257ca6e429949972959.js HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:20 UTC	537	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 410447 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"6434f-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:20 UTC	15847	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 6f 28 22 6c 45 75 68 22 29 7d 2c 4a 50 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 5b 32 5d 3f 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{3:function(n,e,o){n.exports=o("lEuh")},JPst:function(n,e,o){"use strict";n.exports=function(n){var e=[];return e.toString=function(){return this.map(function(e){var o=n(e);return e[2]?"@media ".conc
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2c 5c 6e 61 73 69 64 65 2c 5c 6e 64 65 74 61 69 6c 73 2c 5c 6e 66 69 67 63 61 70 74 69 6f 6e 2c 5c 6e 66 69 67 75 72 65 2c 5c 6e 66 6f 6f 74 65 72 2c 5c 6e 68 65 61 64 65 72 2c 5c 6e 68 67 72 6f 75 70 2c 5c 6e 6d 61 69 6e 2c 5c 6e 6d 65 6e 75 2c 5c 6e 6e 61 76 2c 5c 6e 73 65 63 74 69 6f 6e 2c 5c 6e 73 75 6d 6d 61 72 79 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 2c 5c 6e 63 61 6e 76 61 73 2c 5c 6e 70 72 6f 67 72 65 73 73 2c 5c 6e 76 69 64 65 6f 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 5c 6e 7d 5c 6e 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 Data Ascii: ticle,\naside,\ndetails,\nfigcaption,\nfigure,\nfooter,\nheader,\nhgroup,\nmain,\nmenu,\nnav,\nsection,\nsummary {\n display: block;\n}\naudio,\ncanvas,\nprogress,\nvideo {\n display: inline-block;\n vertical-align: baseline;\n}\naudio:not([controls])
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 32 35 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 34 20 7b 5c 6e 20 20 20 20 72 69 67 68 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 5c 6e 20 20 7d 5c 6e 20 20 2e Data Ascii: h: 100%;\n }\n .col-sm-pull-0 {\n right: auto;\n }\n .col-sm-pull-1 {\n right: 8.33333333%;\n }\n .col-sm-pull-2 {\n right: 16.66666667%;\n }\n .col-sm-pull-3 {\n right: 25%;\n }\n .col-sm-pull-4 {\n right: 33.33333333%;\n }\n .
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 43 43 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 5c 6e 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 2e 31 35 73 3b 5c 6e 7d 5c 6e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 61 39 38 64 38 3b 5c 6e 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 Data Ascii: CC;\n border-radius: 4px;\n box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);\n transition: border-color ease-in-out 0.15s, box-shadow ease-in-out 0.15s;\n}\n.form-control:focus {\n border-color: #3a98d8;\n outline: 0;\n box-shadow: inset 0 1px 1px
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 5c 6e 2e 6f 70 65 6e 20 3e 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 64 34 31 30 63 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 37 33 32 30 61 3b 5c 6e 7d 5c 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 66 Data Ascii: n-primary.dropdown-toggle:hover,\n.open > .btn-primary.dropdown-toggle:focus,\n.open > .btn-primary.dropdown-toggle.focus {\n color: #FFFFFF;\n background-color: #ad410c;\n border-color: #87320a;\n}\n.btn-primary.disabled:hover, .btn-primary.disabled:f
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 69 6e 70 75 74 2d 6c 67 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 3e 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2e 62 74 6e 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 36 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: border-radius: 3px;\n}\n.input-group-addon.input-lg,\n.input-group-lg > .input-group-addon,\n.input-group-lg > .input-group-btn > .input-group-addon.btn {\n padding: 10px 16px;\n font-size: 17px;\n border-radius: 6px;\n}\n.input-group-addon input[type
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 7d 5c 6e 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 3e 20 2e 6f 70 65 6e 20 3e 20 61 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 61 36 39 3b 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 6e 61 76 62 Data Ascii: ckground-color: transparent;\n}\n.navbar-inverse .navbar-nav > .open > a, .navbar-inverse .navbar-nav > .open > a:hover, .navbar-inverse .navbar-nav > .open > a:focus {\n color: #fff;\n background-color: #495a69;\n}\n@media (max-width: 767px) {\n .navb
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 30 39 30 32 30 3b 5c 6e 7d 5c 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 42 46 34 46 42 3b 5c 6e 7d 5c 6e 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 5c 6e 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 32 45 37 39 41 43 3b 5c 6e 7d 5c 6e 61 2e Data Ascii: uccess.active:focus {\n color: #fff;\n background-color: #409020;\n border-color: #409020;\n}\n.list-group-item-info {\n color: #2E79AC;\n background-color: #EBF4FB;\n}\na.list-group-item-info,\nbutton.list-group-item-info {\n color: #2E79AC;\n}\na.
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 6c 67 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 7d 5c 6e 2e 77 65 6c 6c 2d 73 6d 20 7b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 7d 5c 6e 2e 63 6c 6f 73 65 20 7b 5c 6e 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ba(0, 0, 0, 0.05);\n}\n.well blockquote {\n border-color: #ddd;\n border-color: rgba(0, 0, 0, 0.15);\n}\n.well-lg {\n padding: 24px;\n border-radius: 6px;\n}\n.well-sm {\n padding: 9px;\n border-radius: 3px;\n}\n.close {\n float: right;\n font-siz
2024-11-25 16:57:20 UTC	16384	IN	Data Raw: 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 5c 6e 20 20 2e 76 69 73 69 62 6c 65 2d 6c 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 6e 2d 78 73 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 7d 5c 6e 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 31 70 78 29 20 7b 5c 6e 20 20 2e 68 69 64 64 65 Data Ascii: n}\n@media (min-width: 1200px) {\n .visible-lg-inline-block {\n display: inline-block !important;\n }\n}\n@media (max-width: 767px) {\n .hidden-xs {\n display: none !important;\n }\n}\n@media (min-width: 768px) and (max-width: 991px) {\n .hidde

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:20 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ce292e58-401e-00a3-2e0a-3d8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165721Z-178bfbc474bbcwv4hC1NYCypys00000007p00000000067az x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:20 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00c17fdd-701e-000d-2f70-3c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165721Z-174c587ffdf8fcgwhC1TEBnn7000000006b000000000kkcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 2727b5de-901e-005b-4cc1-3e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165721Z-178bfbc474bbcwv4hC1NYCypys00000007g000000000rk5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:20 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d5b120ed-d01e-0017-3f65-3bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165723Z-178bfbc474bbcwv4hC1NYCypys00000007pg000000004q4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 07e1e155-901e-0029-69bf-3e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165722Z-178bfbc474bw8bwphC1NYC38b400000007eg00000000v5aa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49837	170.10.128.88	443	2472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:22 UTC	391	OUT	GET /ttpwp/resources/images/favicon.ico HTTP/1.1 Host: security-us.m.mimecastprotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 16:57:22 UTC	508	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:22 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Thu, 08 Feb 2024 17:09:18 GMT ETag: W/"47e-18d89b1f630" Vary: Accept-Encoding
2024-11-25 16:57:22 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 a2 7c 6b 57 83 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 7c 6b 57 1a 7c 6b 57 b3 7c 6b 57 f3 7c 6b 57 ea 7c 6b 57 a4 7c 6b 57 13 ff ff ff 00 7c 6b 57 83 7c 6b 57 32 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( \|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW\|kW2

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:23 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:23 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f79f7020-601e-0002-483f-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165723Z-15b8b599d88hd9g7hC1TEBp75c000000064000000000ky5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:23 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:23 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:23 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165723Z-174c587ffdftv9hphC1TEBm29w000000066000000000714s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:23 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:23 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:23 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5493b62-c01e-0046-23bf-3e2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165723Z-178bfbc474b9xljthC1NYCtw9400000007s000000000213t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:23 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:24 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:24 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 198a258a-e01e-000c-1dbf-3e8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165724Z-178bfbc474bgvl54hC1NYCsfuw00000007qg00000000fku4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:25 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:25 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:25 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: fa8f60f6-901e-0083-3159-3cbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165725Z-15b8b599d889fz52hC1TEB59as000000064g00000000k2zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:25 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:25 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cd55988-601e-003e-4d0c-3d3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165726Z-178bfbc474bpscmfhC1NYCfc2c00000006a000000000ga37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 16:57:26 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:25 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f184687b-b01e-005c-74e4-3c4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165726Z-15b8b599d88vp97chC1TEB5pzw000000064000000000mkad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:25 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:26 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4ba44194-501e-0047-0aeb-3ece6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165726Z-15b8b599d88qw29phC1TEB5zag000000067g000000008ydp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:26 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:26 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 2993e210-601e-005c-5aea-3ef06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165727Z-15b8b599d88wn9hhhC1TEBry0g000000069g00000000970d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:27 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c6f64b36-301e-0000-4706-3deecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165727Z-178bfbc474bw8bwphC1NYC38b400000007gg00000000mxz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:28 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: eac37560-701e-001e-50bf-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165728Z-178bfbc474bw8bwphC1NYC38b400000007pg00000000207c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:28 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:28 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 962a21d8-701e-001e-0fb8-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165728Z-15b8b599d88z9sc7hC1TEBkr4w00000006c0000000008ng9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:28 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:28 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:28 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 71a2c45e-801e-008c-45c1-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165728Z-178bfbc474b7cbwqhC1NYC8z4n00000007kg00000000nxrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:28 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49851	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:28 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+sKDTGr+xuGkknW&MD=XHUmss4+ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 16:57:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: cca8f8eb-3b24-4992-8ab8-dd6bfd2861e6 MS-RequestId: 27bb5d60-417e-4684-82bd-55022082d149 MS-CV: emXEg7EPZUSU47ko.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 16:57:28 GMT Connection: close Content-Length: 30005
2024-11-25 16:57:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 16:57:29 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:29 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: aaf9eac1-201e-0000-4977-3ba537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165729Z-174c587ffdfb485jhC1TEBmc1s000000062000000000bcxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:29 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 1c201e49-e01e-001f-2255-3f1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165730Z-178bfbc474btrnf9hC1NYCb80g00000007u000000000s9t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7e238ec3-901e-00ac-3dfe-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165730Z-178bfbc474bnwsh4hC1NYC2ubs00000007wg000000004gh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:30 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:30 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165730Z-178bfbc474bpscmfhC1NYCfc2c000000069g00000000h1d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:30 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165731Z-174c587ffdfn4nhwhC1TEB2nbc00000006bg000000004z6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:32 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 008b0be1-f01e-001f-587c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165732Z-174c587ffdfgcs66hC1TEB69cs00000005z000000000vsw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:32 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3272c5ec-601e-003d-7d76-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165732Z-174c587ffdfb485jhC1TEBmc1s00000005yg00000000t6er x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165733Z-174c587ffdfcb7qhhC1TEB3x7000000006b0000000006r54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: dcdca57e-b01e-003e-0dcb-3b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165733Z-15b8b599d88hd9g7hC1TEBp75c000000063g00000000mtgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:33 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 79a67e7b-b01e-0098-1dd0-3ecead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165733Z-178bfbc474b9fdhphC1NYCac0n00000007k000000000t2bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49862	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4f 47 53 6d 76 4e 4f 64 38 6b 32 78 6d 38 33 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 64 36 66 38 33 39 37 38 38 30 39 62 66 62 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: OGSmvNOd8k2xm83w.1Context: 9d6f83978809bfb8
2024-11-25 16:57:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:57:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4f 47 53 6d 76 4e 4f 64 38 6b 32 78 6d 38 33 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 64 36 66 38 33 39 37 38 38 30 39 62 66 62 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 55 6c 6e 71 35 78 32 46 2b 77 77 53 51 42 47 37 44 42 6e 42 74 6e 4e 70 4c 7a 6b 66 69 59 66 49 7a 65 78 71 7a 6d 55 56 57 32 43 4d 71 52 55 6a 79 44 76 63 36 62 6e 77 43 4a 34 49 67 69 79 55 32 2f 66 61 71 30 44 6b 50 6d 43 6e 39 48 46 55 42 6f 56 33 77 67 6e 68 62 47 76 71 30 65 6a 41 2b 38 72 4e 38 49 67 76 31 52 58 41 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: OGSmvNOd8k2xm83w.2Context: 9d6f83978809bfb8<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATUlnq5x2F+wwSQBG7DBnBtnNpLzkfiYfIzexqzmUVW2CMqRUjyDvc6bnwCJ4IgiyU2/faq0DkPmCn9HFUBoV3wgnhbGvq0ejA+8rN8Igv1RXA
2024-11-25 16:57:33 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4f 47 53 6d 76 4e 4f 64 38 6b 32 78 6d 38 33 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 64 36 66 38 33 39 37 38 38 30 39 62 66 62 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: OGSmvNOd8k2xm83w.3Context: 9d6f83978809bfb8
2024-11-25 16:57:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:57:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 42 69 49 69 36 65 44 7a 69 55 69 66 52 2f 4c 56 67 42 66 74 2b 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: BiIi6eDziUifR/LVgBft+Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49863	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 49 37 47 6a 64 32 70 63 45 55 36 47 65 65 34 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 34 37 31 36 65 37 34 61 39 65 64 32 37 65 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: I7Gjd2pcEU6Gee4Z.1Context: e4716e74a9ed27e0
2024-11-25 16:57:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-25 16:57:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 49 37 47 6a 64 32 70 63 45 55 36 47 65 65 34 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 34 37 31 36 65 37 34 61 39 65 64 32 37 65 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 50 59 33 4e 69 42 4e 68 4c 4f 70 33 53 6c 77 42 4d 49 41 34 4f 79 6a 45 73 59 57 39 63 54 42 6f 45 4c 51 6d 49 68 56 55 59 6a 61 54 41 69 43 62 78 37 68 48 6b 44 72 70 71 4c 6d 71 74 51 73 52 6e 72 49 30 74 38 73 4c 77 78 77 54 48 77 6b 30 5a 66 4d 70 35 55 72 66 78 74 7a 4e 68 2f 30 75 67 32 61 52 2f 44 51 61 48 38 78 6a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: I7Gjd2pcEU6Gee4Z.2Context: e4716e74a9ed27e0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUPY3NiBNhLOp3SlwBMIA4OyjEsYW9cTBoELQmIhVUYjaTAiCbx7hHkDrpqLmqtQsRnrI0t8sLwxwTHwk0ZfMp5UrfxtzNh/0ug2aR/DQaH8xj
2024-11-25 16:57:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 49 37 47 6a 64 32 70 63 45 55 36 47 65 65 34 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 34 37 31 36 65 37 34 61 39 65 64 32 37 65 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: I7Gjd2pcEU6Gee4Z.3Context: e4716e74a9ed27e0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-25 16:57:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-25 16:57:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 32 62 47 78 35 52 6f 62 2f 30 36 2b 73 56 5a 46 48 64 32 6b 48 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 2bGx5Rob/06+sVZFHd2kHA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:34 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:34 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 29108258-301e-0052-78fc-3d65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165734Z-178bfbc474bfw4gbhC1NYCunf400000007ug0000000041d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 8f21b959-301e-0096-6e6c-3de71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165734Z-174c587ffdf89smkhC1TEB697s00000006ag000000008vrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:35 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 0a9ad79b-401e-002a-79d1-3ec62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165735Z-178bfbc474bnwsh4hC1NYC2ubs00000007v0000000009dx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:35 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: c0af3736-e01e-00aa-6fbf-3eceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165735Z-15b8b599d88wn9hhhC1TEBry0g000000065g00000000r5xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:35 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:35 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:35 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165735Z-178bfbc474btrnf9hC1NYCb80g00000007tg00000000sqsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:35 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:36 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:36 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165736Z-15b8b599d88z9sc7hC1TEBkr4w00000006ag00000000dssz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:37 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:36 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:37 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:37 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 719deb7f-801e-008c-11bf-3e7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165737Z-178bfbc474bmqmgjhC1NYCy16c00000007r000000000s8nh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:37 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:37 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:38 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:37 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 27ee7166-d01e-00ad-26f5-3ee942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165737Z-15b8b599d88qw29phC1TEB5zag000000062g00000000tq51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 16:57:38 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:37 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:38 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165738Z-174c587ffdfp4vpjhC1TEBybqw000000068g000000006xk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:38 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:37 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:38 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c06a529d-f01e-0085-0e9a-3b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165738Z-15b8b599d88s6mj9hC1TEBur30000000060000000000fpgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:38 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:38 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: da36c5d9-601e-0002-2bc0-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165739Z-178bfbc474bwlrhlhC1NYCy3kg00000007ng00000000u3hv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:39 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 443fb44f-501e-0029-3f61-3bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165739Z-178bfbc474bpnd5vhC1NYC4vr400000007u0000000004g5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:40 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165740Z-174c587ffdftv9hphC1TEBm29w000000062000000000s0f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:40 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 77142413-201e-000c-6b0a-3d79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165740Z-15b8b599d889gj5whC1TEBfyk0000000063g000000004z0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:40 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 02e5a6fb-301e-0099-2cfc-3d6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165740Z-15b8b599d886w4hzhC1TEBb4ug000000064g00000000umz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:41 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c8648c8c-d01e-005a-08bf-3e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165741Z-178bfbc474b9fdhphC1NYCac0n00000007m000000000q0b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:41 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: ab2f8249-b01e-0001-4d3e-3e46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165741Z-15b8b599d88cn5thhC1TEBqxkn000000063000000000dau6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:42 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 91a34af8-001e-0028-211e-3dc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165742Z-178bfbc474bpscmfhC1NYCfc2c00000006bg00000000a8f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:42 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 2a463278-e01e-001f-3ed1-3e1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165742Z-178bfbc474bnwsh4hC1NYC2ubs00000007ug00000000bmc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:42 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: e7f827c2-101e-005a-4855-3d882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165742Z-174c587ffdfn4nhwhC1TEB2nbc00000006c00000000033ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 16:57:43 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 16:57:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 16:57:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b4c9b55b-301e-001f-1d02-3faa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T165743Z-174c587ffdfldtt2hC1TEBwv9c00000006400000000042t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 16:57:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Target ID:	0
Start time:	11:56:30
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:56:41
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2092,i,5552613923586959744,14698278382397681819,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Town%20Of%20Castle%20Rock%20Life%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 205.139.111.117 205.139.111.117
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.22
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.22
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.22
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.149
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: security-us.m.mimecastprotect.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
Town Of Castle Rock Life Insurance Benefits Open Enrollment Plan.shtml