Edit tour

Windows Analysis Report
EPAYMENT_Receipt.html

Overview

General Information

Sample name:	EPAYMENT_Receipt.html
Analysis ID:	1529215
MD5:	0f82f20b08bc16dec7bde5b4d9216ecb
SHA1:	34e8455accfe1401efdd5737b1e63b424d249f20
SHA256:	d407dc16b7964f5be1753dd84af5edaf2932c30777e1655c7f2416f4d840f5f3
Tags:	360degcrm-comhtmluser-JAMESWT_MHT
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Multi AV Scanner detection for submitted file

HTML document with suspicious name

HTML document with suspicious title

Suspicious Javascript code found in HTML file

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains more sections than normal

PE file contains sections with non-standard names

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\EPAYMENT_Receipt.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,2768201058952773091,14733882893006091711,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: EPAYMENT_Receipt.html

ReversingLabs: Detection: 31%

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/EPAYMENT_Receipt.html

LLM: Score: 10 Reasons: HTML file with login form DOM: 0.0.pages.csv

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/EPAYMENT_Receipt.html

Tab title: Interactive CAPTCHA Form with Blurry Background

Suspicious Javascript code found in HTML file

Source: EPAYMENT_Receipt.html	HTTP Parser: location.href
Source: EPAYMENT_Receipt.html	HTTP Parser: .location
Source: EPAYMENT_Receipt.html	HTTP Parser: .location

Source: EPAYMENT_Receipt.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/EPAYMENT_Receipt.html	HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\LICENSE.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49805 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:61792 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 162.159.140.237 162.159.140.237
Source: Joe Sandbox View	IP Address: 162.159.140.237 162.159.140.237
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 172.66.0.235 172.66.0.235
Source: Joe Sandbox View	IP Address: 172.66.0.235 172.66.0.235

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /photo_2024-09-26_08-29-50.jpg HTTP/1.1Host: pub-037acb244bd3438fb27f796720edbd4c.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /photo_2024-09-26_08-29-50.jpg HTTP/1.1Host: pub-037acb244bd3438fb27f796720edbd4c.r2.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Ecf6h1OnVN6KzM&MD=zdzaPMYk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Ecf6h1OnVN6KzM&MD=zdzaPMYk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: pub-037acb244bd3438fb27f796720edbd4c.r2.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: optimization-hints.pb.0.dr	String found in binary or memory: https://123milhas.com/v2/busca/confirmacao-pedido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout-new.dafiti.com.br/success/index.html.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.casasbahia.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.extra.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://checkout.pontofrio.com.br/compra-finalizada
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://comprasegura.olx.com.br/pedidos/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: EPAYMENT_Receipt.html	String found in binary or memory: https://dl.dropboxusercontent.com/scl/fi/basf2q6ai40xsh1vp2hb0/dkm019389294.zip?rlkey=7qk7icrzgpz6og
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://dump-truck.appspot.com/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://emv-qr.googleplex.com/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://google-wallet-ccr-salvador.pagmob.com.br/pay
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.aliexpress.com/p/second-payment/pay-result.html?.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://m.americanas.com.br/compra/pix.
Source: EPAYMENT_Receipt.html	String found in binary or memory: https://pub-037acb244bd3438fb27f796720edbd4c.r2.dev/photo_2024-09-26_08-29-50.jpg
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://rsolomakhin.github.io/pix/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://sacolamobile.magazineluiza.com.br/#/comprovante
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.epocacosmeticos.com.br/checkout/#/payment.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://secure.vivara.com.br/checkout?orderFormId=.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://shopee.com.br/payment/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.amazon.com.br/gp/buy/thankyou/handlers/display.html
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.anacapri.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.arezzo.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.centauro.com.br/checkouts/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.cobasi.com.br/checkout/review.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.elo7.com.br/buyer/order/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.fastshop.com.br/web/checkout-v2/pagamento/confirmacao.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hering.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.hurb.com/br/pay/checkout/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ifood.com.br/pedidos/aguardando-pagamento/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.madeiramadeira.com.br/carrinho/finalizar-pedido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.motorola.com.br/checkout/#/payment
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.natura.com.br/pedido-concluido/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.netshoes.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.paodeacucar.com/checkout.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.petz.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.riachuelo.com.br/successpage
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.schutz.com.br/checkout/order-confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.sephora.com.br/checkout/success/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.ultrafarma.com.br/checkout/confirmacao/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zattini.com.br/checkout/confirmation/.
Source: optimization-hints.pb.0.dr	String found in binary or memory: https://www.zzmall.com.br/checkout/order-confirmation/.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 61843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61987
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61869
Source: unknown	Network traffic detected: HTTP traffic on port 61946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 61969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61983
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 61819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61996
Source: unknown	Network traffic detected: HTTP traffic on port 61832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61878
Source: unknown	Network traffic detected: HTTP traffic on port 61878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61879
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61874
Source: unknown	Network traffic detected: HTTP traffic on port 61912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61886
Source: unknown	Network traffic detected: HTTP traffic on port 61807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61889
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61885
Source: unknown	Network traffic detected: HTTP traffic on port 61844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61899
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61892
Source: unknown	Network traffic detected: HTTP traffic on port 61968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61895
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 61818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 61891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 61979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61828
Source: unknown	Network traffic detected: HTTP traffic on port 61910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61829
Source: unknown	Network traffic detected: HTTP traffic on port 61994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61820
Source: unknown	Network traffic detected: HTTP traffic on port 61833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61821
Source: unknown	Network traffic detected: HTTP traffic on port 61856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61944
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61825
Source: unknown	Network traffic detected: HTTP traffic on port 61879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61827
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 61867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61955
Source: unknown	Network traffic detected: HTTP traffic on port 61829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61959
Source: unknown	Network traffic detected: HTTP traffic on port 61983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 61796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 61945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 61845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 61868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61963
Source: unknown	Network traffic detected: HTTP traffic on port 61797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61966
Source: unknown	Network traffic detected: HTTP traffic on port 61967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61841
Source: unknown	Network traffic detected: HTTP traffic on port 61944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61962
Source: unknown	Network traffic detected: HTTP traffic on port 61978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61975
Source: unknown	Network traffic detected: HTTP traffic on port 61834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61859
Source: unknown	Network traffic detected: HTTP traffic on port 61922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61973
Source: unknown	Network traffic detected: HTTP traffic on port 61828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 61869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 61892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 61827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 61943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61799
Source: unknown	Network traffic detected: HTTP traffic on port 61815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61795
Source: unknown	Network traffic detected: HTTP traffic on port 61907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61796
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61797
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61909
Source: unknown	Network traffic detected: HTTP traffic on port 61937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61904
Source: unknown	Network traffic detected: HTTP traffic on port 61875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61917
Source: unknown	Network traffic detected: HTTP traffic on port 61972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61919
Source: unknown	Network traffic detected: HTTP traffic on port 61800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61915
Source: unknown	Network traffic detected: HTTP traffic on port 61949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61807
Source: unknown	Network traffic detected: HTTP traffic on port 61864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61809
Source: unknown	Network traffic detected: HTTP traffic on port 61841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61926
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61932
Source: unknown	Network traffic detected: HTTP traffic on port 61991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61815
Source: unknown	Network traffic detected: HTTP traffic on port 61886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61937
Source: unknown	Network traffic detected: HTTP traffic on port 61830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 61899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49805 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: EPAYMENT_Receipt.html

Initial sample: receipt

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll.sig	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\cr_en-us_500000_index.bin	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\optimization-hints.pb	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_2332_394328562

Jump to behavior

Source: widevinecdm.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: mal68.phis.winHTML@30/31@6/5

Source: EPAYMENT_Receipt.html

ReversingLabs: Detection: 31%

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\EPAYMENT_Receipt.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,2768201058952773091,14733882893006091711,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,2768201058952773091,14733882893006091711,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.0.dr	Static PE information: section name: .00cfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .gxfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .retplne
Source: widevinecdm.dll.0.dr	Static PE information: section name: .rodata
Source: widevinecdm.dll.0.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.0.dr	Static PE information: section name: malloc_h

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\LICENSE.txt

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
EPAYMENT_Receipt.html	32%	ReversingLabs	Document-HTML.Trojan.PhishLeonem

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll	0%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
pub-037acb244bd3438fb27f796720edbd4c.r2.dev	172.66.0.235	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pub-037acb244bd3438fb27f796720edbd4c.r2.dev/photo_2024-09-26_08-29-50.jpg	false		unknown
file:///C:/Users/user/Desktop/EPAYMENT_Receipt.html	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://google-wallet-ccr-salvador.pagmob.com.br/pay	optimization-hints.pb.0.dr	false	unknown
https://www.hurb.com/br/pay/checkout/.	optimization-hints.pb.0.dr	false	unknown
https://www.sephora.com.br/checkout/success/.	optimization-hints.pb.0.dr	false	unknown
https://www.ifood.com.br/pedidos/aguardando-pagamento/.	optimization-hints.pb.0.dr	false	unknown
https://www.riachuelo.com.br/successpage	optimization-hints.pb.0.dr	false	unknown
https://comprasegura.olx.com.br/pedidos/.	optimization-hints.pb.0.dr	false	unknown
https://secure.vivara.com.br/checkout?orderFormId=.	optimization-hints.pb.0.dr	false	unknown
https://secure.epocacosmeticos.com.br/checkout/#/payment.	optimization-hints.pb.0.dr	false	unknown
https://www.elo7.com.br/buyer/order/.	optimization-hints.pb.0.dr	false	unknown
https://checkout.extra.com.br/compra-finalizada	optimization-hints.pb.0.dr	false	unknown
https://easylist.to/)	LICENSE.txt.0.dr	false	unknown
https://checkout-new.dafiti.com.br/success/index.html.	optimization-hints.pb.0.dr	false	unknown
https://www.madeiramadeira.com.br/carrinho/finalizar-pedido/.	optimization-hints.pb.0.dr	false	unknown
https://dump-truck.appspot.com/.	optimization-hints.pb.0.dr	false	unknown
https://creativecommons.org/compatiblelicenses	LICENSE.txt.0.dr	false	unknown
https://www.petz.com.br/checkout/confirmation/.	optimization-hints.pb.0.dr	false	unknown
https://checkout.casasbahia.com.br/compra-finalizada	optimization-hints.pb.0.dr	false	unknown
https://www.amazon.com.br/gp/buy/thankyou/handlers/display.html	optimization-hints.pb.0.dr	false	unknown
https://github.com/easylist)	LICENSE.txt.0.dr	false	unknown
https://shopee.com.br/payment/.	optimization-hints.pb.0.dr	false	unknown
https://www.motorola.com.br/checkout/#/payment	optimization-hints.pb.0.dr	false	unknown
https://creativecommons.org/.	LICENSE.txt.0.dr	false	unknown
https://www.cobasi.com.br/checkout/review.	optimization-hints.pb.0.dr	false	unknown
https://www.zattini.com.br/checkout/confirmation/.	optimization-hints.pb.0.dr	false	unknown
https://rsolomakhin.github.io/pix/.	optimization-hints.pb.0.dr	false	unknown
https://www.ultrafarma.com.br/checkout/confirmacao/.	optimization-hints.pb.0.dr	false	unknown
https://www.hering.com.br/checkout/#/payment	optimization-hints.pb.0.dr	false	unknown
https://checkout.pontofrio.com.br/compra-finalizada	optimization-hints.pb.0.dr	false	unknown
https://www.natura.com.br/pedido-concluido/.	optimization-hints.pb.0.dr	false	unknown
https://www.anacapri.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false	unknown
https://www.schutz.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false	unknown
https://emv-qr.googleplex.com/.	optimization-hints.pb.0.dr	false	unknown
https://www.centauro.com.br/checkouts/confirmacao/.	optimization-hints.pb.0.dr	false	unknown
https://www.netshoes.com.br/checkout/confirmation/.	optimization-hints.pb.0.dr	false	unknown
https://123milhas.com/v2/busca/confirmacao-pedido/.	optimization-hints.pb.0.dr	false	unknown
https://www.paodeacucar.com/checkout.	optimization-hints.pb.0.dr	false	unknown
https://www.arezzo.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false	unknown
https://comprasegura.olx.com.br/	optimization-hints.pb.0.dr	false	unknown
https://m.americanas.com.br/compra/pix.	optimization-hints.pb.0.dr	false	unknown
https://sacolamobile.magazineluiza.com.br/#/comprovante	optimization-hints.pb.0.dr	false	unknown
https://dl.dropboxusercontent.com/scl/fi/basf2q6ai40xsh1vp2hb0/dkm019389294.zip?rlkey=7qk7icrzgpz6og	EPAYMENT_Receipt.html	false	unknown
https://www.fastshop.com.br/web/checkout-v2/pagamento/confirmacao.	optimization-hints.pb.0.dr	false	unknown
https://www.zzmall.com.br/checkout/order-confirmation/.	optimization-hints.pb.0.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.159.140.237	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.66.0.235	pub-037acb244bd3438fb27f796720edbd4c.r2.dev	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529215
Start date and time:	2024-10-08 19:04:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	EPAYMENT_Receipt.html
Detection:	MAL
Classification:	mal68.phis.winHTML@30/31@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 172.217.18.14, 173.194.76.84, 34.104.35.123, 142.250.184.234, 142.250.185.138, 142.250.185.106, 142.250.185.202, 172.217.18.10, 172.217.16.138, 142.250.185.170, 216.58.206.74, 216.58.212.170, 142.250.185.74, 142.250.184.202, 142.250.185.234, 142.250.186.74, 142.250.186.42, 142.250.181.234, 216.58.206.42, 93.184.221.240, 192.229.221.95, 142.250.185.131, 216.58.206.46, 172.217.18.3
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: EPAYMENT_Receipt.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.159.140.237	http://pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev/tantindex.html	Get hash	malicious	HTMLPhisher	Browse	pub-04836febb1fc46fca4a8c225ef7d2a38.r2.dev/tantindex.html
	http://pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev/qwertyuiopBowa.html	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	pub-17d7828daac64fc3a83940a40d8b01d8.r2.dev/qwertyuiopBowa.html
	http://pub-6abf9f4f2e414af1a92f1d0cac9c1674.r2.dev/auth_gen.html	Get hash	malicious	Unknown	Browse	pub-6abf9f4f2e414af1a92f1d0cac9c1674.r2.dev/auth_gen.html
	http://pub-2801359d2be54bfd8701132626efeb73.r2.dev/owoed.html	Get hash	malicious	HTMLPhisher	Browse	pub-2801359d2be54bfd8701132626efeb73.r2.dev/owoed.html
	http://pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev/ddhjkindex.html	Get hash	malicious	HTMLPhisher	Browse	pub-e1e4d0b4665d4d8996bf04516d898fb2.r2.dev/ddhjkindex.html
	http://pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev/pppindex.html	Get hash	malicious	HTMLPhisher	Browse	pub-a81aa4bbf83846b8a892985d5bbc3a6f.r2.dev/pppindex.html
	http://pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev/woosf.html	Get hash	malicious	Unknown	Browse	pub-21beea42d44e4f0e83b5336b9ac3900a.r2.dev/woosf.html
	http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html
	http://pub-2f611d096e8f43daa9347ca0cf8d9e84.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-2f611d096e8f43daa9347ca0cf8d9e84.r2.dev/index.html
	http://pub-3145f002774347449522e2ca2b2fbcb5.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-3145f002774347449522e2ca2b2fbcb5.r2.dev/index.html
239.255.255.250	https://phisher-parts-production-us-east-1.s3.amazonaws.com/da08a569-c476-4c06-9e6f-9e3c8ae51232/2024-10-08/dm05v41jqt45dhgffdnn8f9og9hsqbgjjjhn2jo1/7abc4121254d93d61494ed63a8489e54fc18f49b8fee3f2e42bc06d8de3bd8f4?response-content-disposition=attachment%3B%20filename%3D%22Trailhead%20Media%2024-090.pdf%22%3B%20filename%2A%3DUTF-8%27%27Trailhead%2520Media%252024-090.pdf&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA37KREM2QGGSCSFZ4%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T163442Z&X-Amz-Expires=13860&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEO%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIDgEEKEw%2BhLGwBtqA9K8lbT2NL7hbWhvf2%2BPjyD670ZwAiEAjxudbMDljL%2FUqXOnRGbBuWM4gt9lBw1st5sI4FM7vZ8q%2FwMIRxAAGgw4MjMxOTMyNjU4MjQiDFL6sO98KdRGT%2FyB6ircA40orR%2Bw3i4U%2B9phl56wCil07vS%2BjAp0tNBfyQAkuYLNSI62vBzUSfUh8AtFx4keNf0RgCCwE%2F5gCyMz9dJzZLyDD2IAKWq0%2BZVLBi%2F7b8rVNUO1YeOio8ujPMfp7PNvhweEfhhY8gWxNds6w8BqlSQW47gyG6lKcp0A7mT5WgKaRXw1WeqCAEMdJCJlPtEma%2BQC5iWhRM0pLWgiBkR6hefhuzg2Tz54kHG3UNQwcDWAaKnjqYhM7zFoyV4AQaheZ%2FfeYnY1yedYoX4pPvs1ESF9JlWKqYxq45XmyrelrdgZHdinsHB9NygBDgLYdQlVcA8q8aEDwM5yaKxZUCkRDUT%2BJb0%2BCtt9rbu6zRC%2FVmZKIGqbIpVGNy4amYEf%2BnSXLUdz7lVpXGsb3kLoOghblbHcyVEfagdESdqIrQuvWG9mqEGbD0OQjdCwVx4Q4jbP%2F64E0vyYOxW5KEhabAoO8CQ4rv8pn47DEAsuKYtGkCRN%2FxqSxHV6ean9UbkBuNzcfqn%2FVpGx3A2uxr7Lyff7MJArWEMXsvfWi5LKjU8A8WeqnHljxyB6lsfFsi3p6KnjmkR9k7rwdRb2wdfEKvrkoq5%2B9cMWCTkzI1xSuI12GZdP74XfakNrsOJTGxzpMOaBlbgGOqUB6EOKQuRv4stEwpQj1THsV61McwaeBhcQW1ZeiHMR%2FPMuUFHOTfzikGnzEF0dw579Pv6WD2vyvq7i7uJv%2BRQQTqPgYSf6GCpXd%2Bpo4bQXTs9GoUG1Dv0s2Tos1ZBR6T7%2BCdAb%2F%2BMYiPDy86%2FFbh1RI6E5jnVh%2ByCIGL%2Bg53Mj67qwCe%2F7aw%2B6TyAnJVcGnug9ml35ow0E3Vc4ob87u3B9PwqgKEDQ&X-Amz-SignedHeaders=host&X-Amz-Signature=e4981c31034331c2fd0b62d9cfd5b86f4ce28daacc9bf862502fbb9c444389d2	Get hash	malicious	HTMLPhisher	Browse
	http://email-tracking.jotelulu.com/c/eJx0yjFyhSAQANDTQBeHXVaFgiKN90B29ZMQdRCSGU-fyQFSv8dhHdmSlgAzOjIEnvQrgLeSVgTrMPlRmBmtoMA2-W1NE-gc0CCBMQ4mmCwNntfkeJxnEYpuc4rMx9mk9NKHdH7pEl6tXbey7woXhUvNdyySj17b8xcULj_XWz5S6Sy3wqXVmD7zsSu0u9R8D5dUeRSZ_YxxOOuua_gHvgP-BgAA__-1WEOb	Get hash	malicious	HTMLPhisher	Browse
	https://hnt.zkg.mybluehost.me/CA/LET	Get hash	malicious	HTMLPhisher	Browse
	https://salesf54b.myportfolio.com/	Get hash	malicious	Unknown	Browse
	https://1drv.ms/w/c/3e7c84f1a590a3e6/IQStDJr3bMEwQZDK5oU6uNI1AXa25ZxVanY0bWjgRrRk-d4	Get hash	malicious	Unknown	Browse
	paymentremittanceinformationCQDM.html	Get hash	malicious	Unknown	Browse
	Experiencehub.com_Report_53158.pdf	Get hash	malicious	Unknown	Browse
	Y1ZqkGzvKm.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse
	Y1ZqkGzvKm.exe	Get hash	malicious	VIP Keylogger	Browse
	https://ipfs.io/ipfs/QmNRP5R9QkxB8MVgk2kWzrmB6GoTVL3gcLheGnJuUDPaXv?filename=forme.html#jstubblefield@securustechnologies.com	Get hash	malicious	HTMLPhisher	Browse
172.66.0.235	http://pub-ba5a046c69974217b0431bca4ba43740.r2.dev/rep.html	Get hash	malicious	HTMLPhisher	Browse	pub-ba5a046c69974217b0431bca4ba43740.r2.dev/rep.html
	http://pub-51f896deb233450089fc1a520e6ed957.r2.dev/kanehods.html	Get hash	malicious	HTMLPhisher	Browse	pub-51f896deb233450089fc1a520e6ed957.r2.dev/kanehods.html
	http://pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/brtw.html	Get hash	malicious	HTMLPhisher	Browse	pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/brtw.html
	http://pub-f3922f20d4c74ba1869fd3db906e3295.r2.dev/gsecondcheck.html	Get hash	malicious	HTMLPhisher	Browse	pub-f3922f20d4c74ba1869fd3db906e3295.r2.dev/gsecondcheck.html
	http://pub-7ccd9eed2f7746f0844d3881a62a4c3f.r2.dev/blob%20(1).html	Get hash	malicious	HTMLPhisher	Browse	pub-7ccd9eed2f7746f0844d3881a62a4c3f.r2.dev/blob%20(1).html
	http://pub-da74aa96e0b9429e84033f8671051bd7.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-da74aa96e0b9429e84033f8671051bd7.r2.dev/index.html
	http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html
	http://pub-a4d4b2b201fe4abc93f68d7648ccb42c.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-a4d4b2b201fe4abc93f68d7648ccb42c.r2.dev/index.html
	http://pub-0b94d4f0b06646c5bbfca320d917c04a.r2.dev/insured.html	Get hash	malicious	HTMLPhisher	Browse	pub-0b94d4f0b06646c5bbfca320d917c04a.r2.dev/insured.html
	http://pub-1cedadbfd7e64635bb38bf2b96ef0c3f.r2.dev/woosb.html	Get hash	malicious	Unknown	Browse	pub-1cedadbfd7e64635bb38bf2b96ef0c3f.r2.dev/woosb.html

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	https://1drv.ms/w/c/3e7c84f1a590a3e6/IQStDJr3bMEwQZDK5oU6uNI1AXa25ZxVanY0bWjgRrRk-d4	Get hash	malicious	Unknown	Browse	13.107.246.45
	paymentremittanceinformationCQDM.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	mEudzoO1bG.exe	Get hash	malicious	FormBook	Browse	13.107.246.45
	15PylGQjzK.exe	Get hash	malicious	LummaC, Vidar	Browse	13.107.246.45
	Ji7kZhlqxz.exe	Get hash	malicious	LummaC, Vidar	Browse	13.107.246.45
	90g7XddjcS.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://www.google.com.bo/url?url=https://coqjcqixwpeuzndc&hpj=jguragr&fwbtzg=qoe&ffzzf=olnshn&aes=fvotjnl&garqe=txbrxc&emrj=ycbtmrgd&uwzlcgsurn=eygnbnharg&q=amp/jhjn24u.v%C2%ADvg%C2%ADzy%C2%ADnp%C2%ADe%C2%ADw%C2%ADl%C2%ADkkukl.com%E2%80%8B/4b3puorbt&vijx=zlglfoj&qcobrch=pupf&cjaim=omgedz&guneqiu=xqm&d=DwMFAg	Get hash	malicious	Unknown	Browse	13.107.246.45
	SecuriteInfo.com.Win32.Agent-BEAA.9093.11707.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	PO20241008.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	Request for Quotation Plug Valve.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	13.107.246.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://phisher-parts-production-us-east-1.s3.amazonaws.com/da08a569-c476-4c06-9e6f-9e3c8ae51232/2024-10-08/dm05v41jqt45dhgffdnn8f9og9hsqbgjjjhn2jo1/7abc4121254d93d61494ed63a8489e54fc18f49b8fee3f2e42bc06d8de3bd8f4?response-content-disposition=attachment%3B%20filename%3D%22Trailhead%20Media%2024-090.pdf%22%3B%20filename%2A%3DUTF-8%27%27Trailhead%2520Media%252024-090.pdf&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA37KREM2QGGSCSFZ4%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T163442Z&X-Amz-Expires=13860&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEO%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIDgEEKEw%2BhLGwBtqA9K8lbT2NL7hbWhvf2%2BPjyD670ZwAiEAjxudbMDljL%2FUqXOnRGbBuWM4gt9lBw1st5sI4FM7vZ8q%2FwMIRxAAGgw4MjMxOTMyNjU4MjQiDFL6sO98KdRGT%2FyB6ircA40orR%2Bw3i4U%2B9phl56wCil07vS%2BjAp0tNBfyQAkuYLNSI62vBzUSfUh8AtFx4keNf0RgCCwE%2F5gCyMz9dJzZLyDD2IAKWq0%2BZVLBi%2F7b8rVNUO1YeOio8ujPMfp7PNvhweEfhhY8gWxNds6w8BqlSQW47gyG6lKcp0A7mT5WgKaRXw1WeqCAEMdJCJlPtEma%2BQC5iWhRM0pLWgiBkR6hefhuzg2Tz54kHG3UNQwcDWAaKnjqYhM7zFoyV4AQaheZ%2FfeYnY1yedYoX4pPvs1ESF9JlWKqYxq45XmyrelrdgZHdinsHB9NygBDgLYdQlVcA8q8aEDwM5yaKxZUCkRDUT%2BJb0%2BCtt9rbu6zRC%2FVmZKIGqbIpVGNy4amYEf%2BnSXLUdz7lVpXGsb3kLoOghblbHcyVEfagdESdqIrQuvWG9mqEGbD0OQjdCwVx4Q4jbP%2F64E0vyYOxW5KEhabAoO8CQ4rv8pn47DEAsuKYtGkCRN%2FxqSxHV6ean9UbkBuNzcfqn%2FVpGx3A2uxr7Lyff7MJArWEMXsvfWi5LKjU8A8WeqnHljxyB6lsfFsi3p6KnjmkR9k7rwdRb2wdfEKvrkoq5%2B9cMWCTkzI1xSuI12GZdP74XfakNrsOJTGxzpMOaBlbgGOqUB6EOKQuRv4stEwpQj1THsV61McwaeBhcQW1ZeiHMR%2FPMuUFHOTfzikGnzEF0dw579Pv6WD2vyvq7i7uJv%2BRQQTqPgYSf6GCpXd%2Bpo4bQXTs9GoUG1Dv0s2Tos1ZBR6T7%2BCdAb%2F%2BMYiPDy86%2FFbh1RI6E5jnVh%2ByCIGL%2Bg53Mj67qwCe%2F7aw%2B6TyAnJVcGnug9ml35ow0E3Vc4ob87u3B9PwqgKEDQ&X-Amz-SignedHeaders=host&X-Amz-Signature=e4981c31034331c2fd0b62d9cfd5b86f4ce28daacc9bf862502fbb9c444389d2	Get hash	malicious	HTMLPhisher	Browse	104.21.72.76
	PWGen_[2MB]_[unsign].exe	Get hash	malicious	LummaC	Browse	104.21.66.23
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	shipment details.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	http://email-tracking.jotelulu.com/c/eJx0yjFyhSAQANDTQBeHXVaFgiKN90B29ZMQdRCSGU-fyQFSv8dhHdmSlgAzOjIEnvQrgLeSVgTrMPlRmBmtoMA2-W1NE-gc0CCBMQ4mmCwNntfkeJxnEYpuc4rMx9mk9NKHdH7pEl6tXbey7woXhUvNdyySj17b8xcULj_XWz5S6Sy3wqXVmD7zsSu0u9R8D5dUeRSZ_YxxOOuua_gHvgP-BgAA__-1WEOb	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://hnt.zkg.mybluehost.me/CA/LET	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://salesf54b.myportfolio.com/	Get hash	malicious	Unknown	Browse	104.21.30.116
	https://1drv.ms/w/c/3e7c84f1a590a3e6/IQStDJr3bMEwQZDK5oU6uNI1AXa25ZxVanY0bWjgRrRk-d4	Get hash	malicious	Unknown	Browse	104.18.36.155
	paymentremittanceinformationCQDM.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	Y1ZqkGzvKm.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
CLOUDFLARENETUS	https://phisher-parts-production-us-east-1.s3.amazonaws.com/da08a569-c476-4c06-9e6f-9e3c8ae51232/2024-10-08/dm05v41jqt45dhgffdnn8f9og9hsqbgjjjhn2jo1/7abc4121254d93d61494ed63a8489e54fc18f49b8fee3f2e42bc06d8de3bd8f4?response-content-disposition=attachment%3B%20filename%3D%22Trailhead%20Media%2024-090.pdf%22%3B%20filename%2A%3DUTF-8%27%27Trailhead%2520Media%252024-090.pdf&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA37KREM2QGGSCSFZ4%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T163442Z&X-Amz-Expires=13860&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEO%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIDgEEKEw%2BhLGwBtqA9K8lbT2NL7hbWhvf2%2BPjyD670ZwAiEAjxudbMDljL%2FUqXOnRGbBuWM4gt9lBw1st5sI4FM7vZ8q%2FwMIRxAAGgw4MjMxOTMyNjU4MjQiDFL6sO98KdRGT%2FyB6ircA40orR%2Bw3i4U%2B9phl56wCil07vS%2BjAp0tNBfyQAkuYLNSI62vBzUSfUh8AtFx4keNf0RgCCwE%2F5gCyMz9dJzZLyDD2IAKWq0%2BZVLBi%2F7b8rVNUO1YeOio8ujPMfp7PNvhweEfhhY8gWxNds6w8BqlSQW47gyG6lKcp0A7mT5WgKaRXw1WeqCAEMdJCJlPtEma%2BQC5iWhRM0pLWgiBkR6hefhuzg2Tz54kHG3UNQwcDWAaKnjqYhM7zFoyV4AQaheZ%2FfeYnY1yedYoX4pPvs1ESF9JlWKqYxq45XmyrelrdgZHdinsHB9NygBDgLYdQlVcA8q8aEDwM5yaKxZUCkRDUT%2BJb0%2BCtt9rbu6zRC%2FVmZKIGqbIpVGNy4amYEf%2BnSXLUdz7lVpXGsb3kLoOghblbHcyVEfagdESdqIrQuvWG9mqEGbD0OQjdCwVx4Q4jbP%2F64E0vyYOxW5KEhabAoO8CQ4rv8pn47DEAsuKYtGkCRN%2FxqSxHV6ean9UbkBuNzcfqn%2FVpGx3A2uxr7Lyff7MJArWEMXsvfWi5LKjU8A8WeqnHljxyB6lsfFsi3p6KnjmkR9k7rwdRb2wdfEKvrkoq5%2B9cMWCTkzI1xSuI12GZdP74XfakNrsOJTGxzpMOaBlbgGOqUB6EOKQuRv4stEwpQj1THsV61McwaeBhcQW1ZeiHMR%2FPMuUFHOTfzikGnzEF0dw579Pv6WD2vyvq7i7uJv%2BRQQTqPgYSf6GCpXd%2Bpo4bQXTs9GoUG1Dv0s2Tos1ZBR6T7%2BCdAb%2F%2BMYiPDy86%2FFbh1RI6E5jnVh%2ByCIGL%2Bg53Mj67qwCe%2F7aw%2B6TyAnJVcGnug9ml35ow0E3Vc4ob87u3B9PwqgKEDQ&X-Amz-SignedHeaders=host&X-Amz-Signature=e4981c31034331c2fd0b62d9cfd5b86f4ce28daacc9bf862502fbb9c444389d2	Get hash	malicious	HTMLPhisher	Browse	104.21.72.76
	PWGen_[2MB]_[unsign].exe	Get hash	malicious	LummaC	Browse	104.21.66.23
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	shipment details.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	http://email-tracking.jotelulu.com/c/eJx0yjFyhSAQANDTQBeHXVaFgiKN90B29ZMQdRCSGU-fyQFSv8dhHdmSlgAzOjIEnvQrgLeSVgTrMPlRmBmtoMA2-W1NE-gc0CCBMQ4mmCwNntfkeJxnEYpuc4rMx9mk9NKHdH7pEl6tXbey7woXhUvNdyySj17b8xcULj_XWz5S6Sy3wqXVmD7zsSu0u9R8D5dUeRSZ_YxxOOuua_gHvgP-BgAA__-1WEOb	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://hnt.zkg.mybluehost.me/CA/LET	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://salesf54b.myportfolio.com/	Get hash	malicious	Unknown	Browse	104.21.30.116
	https://1drv.ms/w/c/3e7c84f1a590a3e6/IQStDJr3bMEwQZDK5oU6uNI1AXa25ZxVanY0bWjgRrRk-d4	Get hash	malicious	Unknown	Browse	104.18.36.155
	paymentremittanceinformationCQDM.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	Y1ZqkGzvKm.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://phisher-parts-production-us-east-1.s3.amazonaws.com/da08a569-c476-4c06-9e6f-9e3c8ae51232/2024-10-08/dm05v41jqt45dhgffdnn8f9og9hsqbgjjjhn2jo1/7abc4121254d93d61494ed63a8489e54fc18f49b8fee3f2e42bc06d8de3bd8f4?response-content-disposition=attachment%3B%20filename%3D%22Trailhead%20Media%2024-090.pdf%22%3B%20filename%2A%3DUTF-8%27%27Trailhead%2520Media%252024-090.pdf&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA37KREM2QGGSCSFZ4%2F20241008%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241008T163442Z&X-Amz-Expires=13860&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEO%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIDgEEKEw%2BhLGwBtqA9K8lbT2NL7hbWhvf2%2BPjyD670ZwAiEAjxudbMDljL%2FUqXOnRGbBuWM4gt9lBw1st5sI4FM7vZ8q%2FwMIRxAAGgw4MjMxOTMyNjU4MjQiDFL6sO98KdRGT%2FyB6ircA40orR%2Bw3i4U%2B9phl56wCil07vS%2BjAp0tNBfyQAkuYLNSI62vBzUSfUh8AtFx4keNf0RgCCwE%2F5gCyMz9dJzZLyDD2IAKWq0%2BZVLBi%2F7b8rVNUO1YeOio8ujPMfp7PNvhweEfhhY8gWxNds6w8BqlSQW47gyG6lKcp0A7mT5WgKaRXw1WeqCAEMdJCJlPtEma%2BQC5iWhRM0pLWgiBkR6hefhuzg2Tz54kHG3UNQwcDWAaKnjqYhM7zFoyV4AQaheZ%2FfeYnY1yedYoX4pPvs1ESF9JlWKqYxq45XmyrelrdgZHdinsHB9NygBDgLYdQlVcA8q8aEDwM5yaKxZUCkRDUT%2BJb0%2BCtt9rbu6zRC%2FVmZKIGqbIpVGNy4amYEf%2BnSXLUdz7lVpXGsb3kLoOghblbHcyVEfagdESdqIrQuvWG9mqEGbD0OQjdCwVx4Q4jbP%2F64E0vyYOxW5KEhabAoO8CQ4rv8pn47DEAsuKYtGkCRN%2FxqSxHV6ean9UbkBuNzcfqn%2FVpGx3A2uxr7Lyff7MJArWEMXsvfWi5LKjU8A8WeqnHljxyB6lsfFsi3p6KnjmkR9k7rwdRb2wdfEKvrkoq5%2B9cMWCTkzI1xSuI12GZdP74XfakNrsOJTGxzpMOaBlbgGOqUB6EOKQuRv4stEwpQj1THsV61McwaeBhcQW1ZeiHMR%2FPMuUFHOTfzikGnzEF0dw579Pv6WD2vyvq7i7uJv%2BRQQTqPgYSf6GCpXd%2Bpo4bQXTs9GoUG1Dv0s2Tos1ZBR6T7%2BCdAb%2F%2BMYiPDy86%2FFbh1RI6E5jnVh%2ByCIGL%2Bg53Mj67qwCe%2F7aw%2B6TyAnJVcGnug9ml35ow0E3Vc4ob87u3B9PwqgKEDQ&X-Amz-SignedHeaders=host&X-Amz-Signature=e4981c31034331c2fd0b62d9cfd5b86f4ce28daacc9bf862502fbb9c444389d2	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://salesf54b.myportfolio.com/	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://1drv.ms/w/c/3e7c84f1a590a3e6/IQStDJr3bMEwQZDK5oU6uNI1AXa25ZxVanY0bWjgRrRk-d4	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	paymentremittanceinformationCQDM.html	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	Experiencehub.com_Report_53158.pdf	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	Y1ZqkGzvKm.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	Y1ZqkGzvKm.exe	Get hash	malicious	VIP Keylogger	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://ipfs.io/ipfs/QmNRP5R9QkxB8MVgk2kWzrmB6GoTVL3gcLheGnJuUDPaXv?filename=forme.html#jstubblefield@securustechnologies.com	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	EY10AIvC8B.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	EY10AIvC8B.exe	Get hash	malicious	VIP Keylogger	Browse	184.28.90.27 13.107.246.45 20.12.23.50

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll	Audio_Msg..00293614554893Transcript.html	Get hash	malicious	Unknown	Browse
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	Farahexperiences.com_Report_52288.pdf	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	ELECTRONIC RECEIPT_Opcsa.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	file.exe	Get hash	malicious	Unknown	Browse
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse
	https://qrco.de/bfQgn5	Get hash	malicious	Unknown	Browse
	Inv_Doc_18#908.pdf	Get hash	malicious	Unknown	Browse
	http://www.revsharboomerang.com	Get hash	malicious	Unknown	Browse
	AMA - 375,545.04.htm	Get hash	malicious	Unknown	Browse
	ACH Payment Details_(Dcorbett)CQDM.html	Get hash	malicious	Unknown	Browse
	doc_inv_09-12#965.pdf	Get hash	malicious	Unknown	Browse
	bot_library.exe	Get hash	malicious	Unknown	Browse
	svAsYrT598.exe	Get hash	malicious	Unknown	Browse
	kc8qrDHj1V.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	473
Entropy (8bit):	4.388167319950301
Encrypted:	false
SSDEEP:	6:LOT6w+DmsDZrkrDxBYRgELGNB+cIMLohXOl0t1iKR/UFioWd9+iAt4jZMeLhJoUs:iwDtVEDsCDLeelyigqBjt4eK2f55
MD5:	F6719687BED7403612EAED0B191EB4A9
SHA1:	DD03919750E45507743BD089A659E8EFCEFA7AF1
SHA-256:	AFB514E4269594234B32C873BA2CD3CC8892E836861137B531A40A1232820C59
SHA-512:	DD14A7EAE05D90F35A055A5098D09CD2233D784F6AC228B5927925241689BFF828E573B7A90A5196BFDD7AAEECF00F5C94486AD9E3910CFB07475FCFBB7F0D56
Malicious:	false
Preview:	Google LLC and its affiliates ("Google") own all legal right, title and.interest in and to the content decryption module software ("Software") and.related documentation, including any intellectual property rights in the.Software. You may not use, modify, sell, or otherwise distribute the Software.without a separate license agreement with Google. The Software is not open.source software...If you are interested in licensing the Software, please contact.www.widevine.com.

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1550
Entropy (8bit):	5.9461543350675905
Encrypted:	false
SSDEEP:	48:p/hFkmoyMTI1jglp6NjkakKwk+R2VJAz5s:RhMka5adwTYQz5s
MD5:	98B310FC33843D771DA0089FA155EDB2
SHA1:	5690A43F43673B947EB4C433CB4F5488A287E29C
SHA-256:	28F09A4AF935D2894689CC00658D597257422CAFF20A01055EFD8E78AD5E829F
SHA-512:	E76830974EA54C94E857179CA0DA893E088034367CA5C33E71C1016B788E737D65AB49AD9A9E6FEB85385B963AF5C13DB0A91E3F3072AC91600E91A1CEA0AB6F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KnESAO6ts6E14P0aoVwC_yghkUn7_i9PCMh0NvK44eLJL04dv

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	19236784
Entropy (8bit):	7.70214269860876
Encrypted:	false
SSDEEP:	393216:FPRzXYeXFyjsrZuvpYl5SJIhw7PJeP9TZHZMaMq0Vrq8P:DFyjs0pYl1hwDJeVT7erq8P
MD5:	9D76604A452D6FDAD3CDAD64DBDD68A1
SHA1:	DC7E98AD3CF8D7BE84F6B3074158B7196356675B
SHA-256:	EB98FA2CFE142976B33FC3E15CF38A391F079E01CF61A82577B15107A98DEA02
SHA-512:	EDD0C26C0B1323344EB89F315876E9DEB460817FC7C52FAEDADAD34732797DAD0D73906F63F832E7C877A37DB4B2907C071748EDFAD81EA4009685385E9E9137
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: Inv_Doc_18#908.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AMA - 375,545.04.htm, Detection: malicious, Browse Filename: ACH Payment Details_(Dcorbett)CQDM.html, Detection: malicious, Browse Filename: doc_inv_09-12#965.pdf, Detection: malicious, Browse Filename: bot_library.exe, Detection: malicious, Browse Filename: svAsYrT598.exe, Detection: malicious, Browse Filename: kc8qrDHj1V.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Gf.........." ......o.........P.l......................................p].....c.%...`A..........................................!.......!...... ]......`[..$...f%..!...0].0:....!.8.....................!.(...`cp.@...........p.!..............................text.....o.......o................. ..`.rdata..x.....o.......o.............@..@.data...pv8...".......".............@....pdata...$...`[..&....#.............@..@.00cfg..0.....\.......$.............@..@.gxfg... (....\......$.............@..@.retplne......\.......%..................rodata.......\.......%............. ..`.tls..........\.......%.............@..._RDATA..\.....]...... %.............@..@malloc_h......]......"%............. ..`.rsrc........ ]......$%.............@..@.reloc..0:...0]..<...%.............@..B................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll.sig

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.572464059652219
Encrypted:	false
SSDEEP:	24:38H/VZn47VBRxgCUQuODHBJeriJ8yojUdnkLvXWgl0oHLrUXAokYH/o8j/bmspTh:38HdurRxHSOlAiqYoXWVDXJ/o8zbmsFh
MD5:	A19EC48B4B28F3AA9C32150DCA8C0E39
SHA1:	02981E40B643C2A987D47BF58F42B7F3CA5AAF07
SHA-256:	D363751B0EE48517DA1B56C17FFCD78DD57F25B092B09879667DB10338077621
SHA-512:	718A24E1FB45AB0FD3DB5A5C45B0E0061D9061D8615E2A8D6DB2150BF72267E96774094A6FC07A250D5BBBC5133A1CB635D8F7ADC5B1751FA99327FCE9555941
Malicious:	false
Preview:	....0...0...........6cd/+J.v{..B...0....H........0}1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1"0 ..U....widevine-codesign-root-ca0...171013173909Z..271011173909Z0y1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1.0...U....widevine-vmp-codesign0.."0....H.............0.........2F..8.e..-....$r...{^........0.%.HA...sA"D.q.=6...#.J.N.......&..k;.+...<xF.......B8.)S....o..\|Ci.F.A6....J.......Y..4..{.5u.9N...=...#.M..s.F!j.f%&ld.R...?!Ot@......#.f..O..[.V.p0y....+...S.].....M.=.9...>.. ........>.:....1tl.....`D/c..j..........0..0...U......L...cC.E..R.n...$.0...U.#..0....=..tW....!.B.#U).0...U....0.0...U........0...U.%..0...+.......0...+.....y........0....H.............g.."..[..t{.4~.,.G....4K.....(x$...} ....N..b\|d......h..u6?.L.(&.Oup...$!...4R. 5.-...s...K/..U[..[.+.sAX*.~...^0..ba>;.#....x...b.-1...E..l....S.n.a....)U .q..C>d:...<[..F5...7...[.-.l}.T Lc.X..Qf...z..:.Q..e.m

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9232676497295262
Encrypted:	false
SSDEEP:	3:SQTWAEVtGbSHaqHGDTzoARPkBDF:SQyANeayyTzTP6
MD5:	5BFBCC6E7AA3E9C1570C5C73F38FA8EA
SHA1:	497BAFA5658C6CE8C8010D12F104EEBEC7A1BAE2
SHA-256:	84470096167EA43C0880B39FE44B42F552014E4F85B66805C2935C542BA3CB8E
SHA-512:	41BBED6CC317FF190189D63D6D5910D30E23A5160E5FF5F635FF408AAB13452DA8174556D7120DB176701435A3329A93A7450583404D56C34A37B67F1A332EDC
Malicious:	false
Preview:	1.567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	4.774546324439748
Encrypted:	false
SSDEEP:	24:ulaihI11X1TRuRckckH3WoA0UNqLQxUNqmTxyNq+TA:C1hYl1uRfckHkseDA
MD5:	2FF237ADBC218A4934A8B361BCD3428E
SHA1:	EFAD279269D9372DCF9C65B8527792E2E9E6CA7D
SHA-256:	25A702DD5389CC7B077C6B4E06C1FAD9BDEA74A9C37453388986D093C277D827
SHA-512:	BAFD91699019AB756ADF13633B825D9D9BAE374CA146E8C05ABC70C931D491D421268A6E6549A8D284782898BC6EB99E3017FBE3A98E09CD3DFECAD19F95E542
Malicious:	false
Preview:	{. "manifest_version": 2,. "update_url": "https://clients2.google.com/service/update2/crx",. "name": "WidevineCdm",. "description": "Widevine Content Decryption Module",. "version": "4.10.2830.0",. "minimum_chrome_version": "68.0.3430.0",. "x-cdm-module-versions": "4",. "x-cdm-interface-versions": "10",. "x-cdm-host-versions": "10",. "x-cdm-codecs": "vp8,vp09,avc1,av01",. "x-cdm-persistent-license-support": true,. "x-cdm-supported-encryption-schemes": [. "cenc",. "cbcs". ],. "icons": {. "16": "imgs/icon-128x128.png",. "128": "imgs/icon-128x128.png". },. "platforms": [. {. "os": "win",. "arch": "x64",. "sub_package_path": "_platform_specific/win_x64/". },. {. "os": "win",. "arch": "x86",. "sub_package_path": "_platform_specific/win_x86/". },. {. "os": "win",. "arch": "arm64",. "sub_package_path": "_platform_specific/win_arm64/". }. ],. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1766
Entropy (8bit):	6.0290011769488645
Encrypted:	false
SSDEEP:	48:p/hDntOXVA31Jkf4kakNVcqxvTor1ekwe6mdj3ItW:ROV+E7ayLxvUr4vSD8W
MD5:	DFA1381564AE74DA78D8B0EDFB6F7609
SHA1:	7EBA89F4202F7536F068ABF1E4065DF26A64CFEC
SHA-256:	2DB3DE37555910A3E2C6241B83A33DF827D18938A0ECC33BA4691ABD4DE399AE
SHA-512:	09F8317A58C25E15AAFA37A302554BC82DFE09A545E8B148BF051023D99529866964459D587300B240A7295A5592123EC709BC20E8A3A141DE50DC8980908B78
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiN0VyMk5fdllnTE03aUJ0UzkwamM5U0xQMzk4dFhVZUZtU2tXdWwtUVVsYyJ9LHsicGF0aCI6Im9wdGltaXphdGlvbi1oaW50cy5wYiIsInJvb3RfaGFzaCI6IkZzZ0M2cFVNcjlROEFMTDJfcGs3WXRzVjBZdGVDSlBlY2xoRE1QOWJ0YU0ifV0sImZvcm1hdCI6InRyZWVoYXNoIiwiaGFzaF9ibG9ja19zaXplIjo0MDk2fV0sIml0ZW1faWQiOiJsbWVsZ2xlamhlbWVqZ2lucGJvYWdkZGdkZmJlcGdtcCIsIml0ZW1fdmVyc2lvbiI6IjQ2OSIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"BkF6XwWmqiXyKsgU8-mHYtTkSuUBMnH-rsi2IGmuUH-P-EVwy0ifJsVsqlUbOn5BfYVAglXxAIYEMEgz_ET0DMq_iq71r8c9ChdIWdxu8DaphJi1Yud_gB_w5SMLug9ujgfZMd6_M9tduLlzpfXCPonqImprCTIm0GTeY8sqj_OktmJ5WBRDtIgr1SbI_OvmHo65X9ZdP9xs7diXYg9EwmiHF07QwAqCFtRbr2zku_PYeA3R4Vbvy8egTFfzN0ylUJ9nFntpamG5h5ze48TFcSlPxqBTuM_YYfCgPgoItYaZBihBsjBBvhP7cVi-qdHft0kI6etuz7YYJ4vvaJytMnaGS

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9013760824862507
Encrypted:	false
SSDEEP:	3:SUPRXHcF//WWSfldeKtDn:SUpHwWWSflde8Dn
MD5:	6392FB34E9104DCB36159449BB208159
SHA1:	ECE6C8985944965FE321483E0143C92CACD18FD7
SHA-256:	B8062E5325BE6C296336BF030570D9A42FC0DB363A02585B34396C31BBBE2A81
SHA-512:	D2EE666C1BF9A18F1B03CEA2B159D9F1106313E1EA17711EF512FACEFE8E917A2DF1E3B0D161594FAB2EABABABBA90176335E87C974E5CDE2C77054BA381D9A2
Malicious:	false
Preview:	1.145a7369e2dd2da35087d7052c862d1c4c9d30231fa043066ee1a89b1d609926

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.481149880283266
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFzIe4/+S14hHcDKhtH8tAn:F6VlMQ/+S1ySKH8tAn
MD5:	9CBBCBCE0CB1CEF0C407DF119768368A
SHA1:	25656B09822D182479D75B5CF97D807FBE2804B1
SHA-256:	EC4AF637FBD880B33B881B52F748DCF522CFDFDF2D5D4785992916BA5F905257
SHA-512:	CE37F1D0152D4E56D6F2BAF21BD6582804BA01148656072118E1F22DBBB116298AFA626B8B9C61C147EF75A1D94D0F4ED8A9F54BEFE9C7E0F91031CBBA0EBBEA
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Optimization Hints",. "version": "469",. "ruleset_format": "1.0.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\optimization-hints.pb

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	53510
Entropy (8bit):	7.975951817984722
Encrypted:	false
SSDEEP:	1536:/zehGBKxdYm83YG3iHb8fZANCdX4SjsxAy:x0xW3YG3i78fZk67jsL
MD5:	6B27C5919FF084A68B2D28A5F48F0EBA
SHA1:	775F32129663C4291326376BB5D95138C4CCCE3E
SHA-256:	0AFCC1430F47B0A40E56205BA46C146959C255542C2130473A2BB666E1D27BFC
SHA-512:	3FD90A490D24BF2B0B8FE5CA7B06DAF3018E549396F2B573CB6FA8136C57466EA488153486F018039DABC55BC8BEEA3F69892B872EDB2608003DE371E5DEB94E
Malicious:	false
Preview:	............I.....g2.I..jI..n).+..)...h.+.A7p..q.:S4.Z...O.. R..\|....Da.e.?..W.-..ni2.....[.....6%8....x..y".b.Y7^.n......%/...f..c../.CY....j..\|].b..+.f..].{S.s..J...\|..nn..G..jb).Mn..../....R%.Fm.....K.....&.n.P.]..M.q:E..#^..O.....+...%\|{....5d..............=....X......._...OS1...+.q...7..vzf.....(....iVp....7..."QA.k`......Q...Y../X4..`...<+.@.U...m .'.X6...-.aD....<..w..7bv.e......<~.J.d...i..7..o}x_...B.T....V.et....u.{/.....p6.....t.Y(a.E......t.....P..45.a...!B-......B.RY#H....E....%...I..a.....$...T....7;...y..`.l.p..kv..`..q]...z.9rX...Rb..Q.N..../.>....p.ah.........z.\.Y}2W..o.?..-6=y...2[:..t7(t)....^.H...cl"]F."..@'h....t..s..Pf..SA.yCs....IuT..=.6...{...X....,...}.....ddE.2............YU..HQ..h.i.v...;..b....}.]K..../O.....]S~.l.H...........&....~m....3..l.l*RN"..k..1f.x.$..n...P-..](.Z./.........9...WJ\. /.B.Q....h.R...e.............Fg]...........?.Z..iH.Kyxc.e.P...H.....1N.Ac.;.4..he..b.V.w..'.....Z...K.4......p...2..9.s.."

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Audio_Msg..00293614554893Transcript.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Farahexperiences.com_Report_52288.pdf, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: ELECTRONIC RECEIPT_Opcsa.html, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJHb29nbGUuV2lkZXZpbmUuQ0RNLmRsbCIsInJvb3RfaGFzaCI6Im9ZZjVLQ2Z1ai1MYmdLYkQyWFdBS1E5Nkp1bTR1Q2dCZTRVeEpGSExSNWMifSx7InBhdGgiOiJtYW5pZmVzdC5qc29uIiwicm9vdF9oYXNoIjoiYk01YTJOU1d2RkY1LW9Tdml2eFdqdXVwZ05pblVGakdPQXRrLTBJcGpDZyJ9XSwiZm9ybWF0IjoidHJlZWhhc2giLCJoYXNoX2Jsb2NrX3NpemUiOjQwOTZ9XSwiaXRlbV9pZCI6Im5laWZhb2luZGdnZmNqaWNmZmtncG1ubHBwZWZmYWJkIiwiaXRlbV92ZXJzaW9uIjoiMS4wLjI3MzguMCIsInByb3RvY29sX3ZlcnNpb24iOjF9","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74272
Entropy (8bit):	5.535436646838848
Encrypted:	false
SSDEEP:	1536:GB9Cdg51kGLmOSe1pEQHdPr4l0TmmJ2I7CwguaRZrgMQUavJX5vwKf:Sok1RLtb1ptdPrYk1J2IPguangMQ3X5P
MD5:	B23DD5B6ECCB460003EA37BA0F5E3730
SHA1:	FD444553CB7699F84CE7E5664232771673DCF67D
SHA-256:	7F7F432C27D97DEE184DCD3EA20F731674C008BE849C0136F9C5358E359F3EA9
SHA-512:	7E47BD172C4BD4C65F063A8FA3FB33ED47F29156EB20E42D4E8EA73C6F02526A30FFE907BE5B7C1406D4EAA71FBEC7C0D557C376DCCD0A1A961E2F61B3431181
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/."......0.8.@.R./plugins/cactus-ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana...........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/..........0.8.@.R./page-links-to/dist/new-tab.js........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^.2........0.8.@.R"cloudfront.net/js/common/invoke.js..........0.8

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.990179229242317
Encrypted:	false
SSDEEP:	24:pZRj/flTHYe1DxxpTkYbKCCojeT31zkaoX63wMHF48I31RwCCyqoX6kyKlklyJqw:p/h4YDxxlbKlTlkakgPLI3hCyqkwnlKD
MD5:	2FF08C4B4128F634CBBFEA0C1C44AA2E
SHA1:	45D11E57DDF29E843AC8545C7D06CDDB5DF3E962
SHA-256:	33B6F2ECD5FB7F9FAF538F29808716EFA337A653809943A8E4B5E450B734DA09
SHA-512:	14BD9E921E1DB9AC8720C1177897DB624292865D29B976ED9CCCEE572726D7D123A8F39E470987DF796AE0552861FBAE056CDB395F0CB8B0E699C28F5E221999
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"ifBoq-woYhqxB78EqRoo2fPRIEfkuykYMlD9kWeeG2QS6-R5YvGNJ9n5OljLXGjvK5U3MDFRLi-UCguxuUaoFjU_QeSCiOLxvDS5JHdk8Bbba8fCW6ZKnH_fvocQD8W7Hj0reH3gOPmD7sIraz8IvG86GRuGPqsxbgc_BRtOCa5KRgqaxfjt7tKlOtaUoO3_qsNlf_8F8k0tNZh131RRIEaXw53z3ZzGpWtgYC0u6s0JKag8l

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8568101737886993
Encrypted:	false
SSDEEP:	3:SWcgK7GtszDAAnHT:SWc97GWzDlnHT
MD5:	6DBEDE254AF8A23D6CB2ABAEA8D2E38F
SHA1:	A827D46FA5D53CB7B134F143CC15A30BA015ED21
SHA-256:	376ED55CD5AB45C0F7BAA1AF0AC2637C33DEA6D1D4683B729AE7CE764F70DAA1
SHA-512:	0F28FD8AF582C18ECCCC1321B94902501D31C4B6C1D11684780DED6217C14E1B313F58A644516F37AE69232F1C2861915337A4D84185E18124F40C629A50B7F9
Malicious:	false
Preview:	1.3651711652892acf34795b2c7e4d401ed2274c20e952f65cf52deeeef5bbf9b5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1KPYn:F6VlMZWuMt5SKPS1eY
MD5:	3448D97DA638C7EF0FBCA9B6949FFC8F
SHA1:	36D8434F26F0316FAB4627F7856FCA7291FE8ADF
SHA-256:	1700A11FD1E58367B450A41B2AE5FD26ECB5CDB459869C796C7DDE18F1D30F73
SHA-512:	9BF9055B2EF82BD1D2A1E94009FED2D3481FE2DC336D306FA0DB786658EFA5B72C9A9A214A829B9FCC4222476051871FF012009C64F09B9109072ABDF3DEF8CC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.51.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1796
Entropy (8bit):	6.023059468341497
Encrypted:	false
SSDEEP:	48:p/hpfJI12CpFN697akgTguixC1MWk994aJqki/eYZhUr:RG2Cu7afTUND94aw4gy
MD5:	F5B9C966EB93F7872A3912DF54FB111F
SHA1:	7B1A197F4D759316284BFEC79F30013B7C781D94
SHA-256:	38332E166736E41CE2E5E668C3DE1EEC8467B87D5136C8413E6261C0F8B35ABE
SHA-512:	E2EC83F5146A7FDA8B67BC0731E899C046FE672D570D61364F50A1609E885A7898F4AFED063A78D997823155EEA8FA779DE646EE71D8C1A4B649E9BCC189681F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiJjcl9lbi11c181MDAwMDBfaW5kZXguYmluIiwicm9vdF9oYXNoIjoiMVRocEpLY2hOX1FPNVRzR29fTnVyeVp4ci1EN01KdndLQk9zaUVZekpxZyJ9LHsicGF0aCI6Im1hbmlmZXN0Lmpzb24iLCJyb290X2hhc2giOiJsem9jUFk2dGIyeFdEODBYeThPQkl2MFk3d0NWVWpRSno0eFlLV3RYMVV3In1dLCJmb3JtYXQiOiJ0cmVlaGFzaCIsImhhc2hfYmxvY2tfc2l6ZSI6NDA5Nn1dLCJpdGVtX2lkIjoib2JlZGJiaGJwbW9qbmthbmljaW9nZ25tZWxtb29tb2MiLCJpdGVtX3ZlcnNpb24iOiIyMDI0MDkwMi42NzIzNjM3NTYuMTQiLCJwcm90b2NvbF92ZXJzaW9uIjoxfQ","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"h7GCxBCNXnJa23jwaXVE8aY5IHTNhOvNo-NOEw_6RPBXAl0-dKBASWSAEiMc_xsz8qscSTW9x0XExLCL0w_nLC02d5-qgSgzH6ShrlYT-okgUXjyZ1mkXC8KG4eY7UA-ZJbi3T84_B93z9hwd5qJ1-ypqEjDpjS66F43GS3neddJf8RQZrqlA3utHJ8SkNykv8FtQr11Smdztwq6gzw_v3Hq94E9qheksB4bSUQJQQG3cM8vy7hiA9lkvSbjHeKwMcSwQAVuLnlsmQQC6854LUrrY-FAptanJKtWJhguWhyu7NyEuTpfR8Hsf3i

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\cr_en-us_500000_index.bin

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	7915327
Entropy (8bit):	6.570635803882568
Encrypted:	false
SSDEEP:	98304:QyIr+F14oHnOFaLct88SXmLiqZ3k5aDyS1WJDjm6J7Yfm7SQ8FWG1mx6Fq:QyRF14BYoSLqZUCyQWNOESQ8S0q
MD5:	96DB58957B26AB466F04A49E564B88E9
SHA1:	8F3A2CEE899435119189804820DA85E488876279
SHA-256:	EC7173FCA63E6AE7185279F7B0977460D3824E1C124DDADEA0C1BF327C93FA76
SHA-512:	C5CA6C0F99C8266C18CEAFFAF69874AE02F3BB1B088E96571A16D2AC6DBFBFA4AA2FBB7959817B629DD63211F43D5CC4E277C32F2DFC26BBA5CC7D684F14F9EF
Malicious:	false
Preview:	......w.....h....a..#..y..1..f#~2..tw7;..r!.I..g.MR..c.)Z..ly.n..e3.w..d..}..i.O...mMB...p.x...bw....uk....sG<...o.....z.?...n.%...k.....vI\|...j.....x.V...1.....q.....55....2.....9w....4.....3CU...7.....6.....8.5...0Ia.....h.....i...*cp.....p.....q...&.u.....v.....v........x...#.y.../.y....W{...$.\|....... ...................-8-tetrahydrocannabinol.i........ to .....-.............. ....... meaning.................^............... ......>........ ......T....E....)e............ meaning.....G...... meaning.....dgar guzm.n l.pez..........<W..(....... meaning.=.........1...... meaning....@Q............ meaningh...........t.... meaning.....#....... ....... . .... ................r eldon...... meaning..... meaning.{..... ..... .......r........2l.... meaning.L.... meaning.C..... .......A........ . .....R..............

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8210255675168567
Encrypted:	false
SSDEEP:	3:SS1KmDEcdGcEAEE5NoBdBA/BTn:SSFDEc1EpvdBA/ln
MD5:	D2F3C5774D48283F037291454607C3CD
SHA1:	F4BA368313FCDC02C75DE02F2FD3CB5F7A0980F6
SHA-256:	3B8A11F3A749394203849D0FAED36A6FD0695B85B4774FC5476A651D55684825
SHA-512:	A7A85D59DBA1486D463259260136E38843D9255FF8632B582B94A0DF96D6A4E75C77C438E2F871D15FF6831A259785FB19E4AEC300B6C91AA383B7CAE10F5AB4
Malicious:	false
Preview:	1.79a6486379270d1f75affa98c9a93e236afd20fee86adbaadd8d3b9f37aa13c6

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.903151975132155
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifF0AAGAR3CKG/w/VpKS1y9SGZQTLUG:F6VlMT2C7Y/VUS1y1cLUG
MD5:	79C93E2D4FF43CED56BC85DD135A1F7F
SHA1:	BAC80396DD067CDE3E8B35C2569224D9774FE6B5
SHA-256:	973A1C3D8EAD6F6C560FCD17CBC38122FD18EF0095523409CF8C58296B57D54C
SHA-512:	3185C831036E8E47101CD4EED83CF9BC40B27F108648F7C941C724DCA3E9F0A029030F5F60E3D836303DEE140335CFBA11B7ADC59B6AFE57EE90415D1FE9B6CC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "OnDeviceHeadSuggestENUS500000",. "version": "20240902.672363756.14".}

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 765x992, components 3
Category:	dropped
Size (bytes):	31221
Entropy (8bit):	7.621164018210675
Encrypted:	false
SSDEEP:	768:SgbxhBALrc1mkValDimtDFSFqtG7P2fYB8:SYxhBALAEiO+sDFSFqU7+fYB8
MD5:	2D6563A2316355A57308635BA957C5EC
SHA1:	EEB9A3D34984A6E7E500AE74553E828471463C31
SHA-256:	E835542E448B0A1FC02C3AB00D5949AD72EB2ED0A4F9A6D0D2835564A8C76CE6
SHA-512:	A6F3E1E4DCC1BC416DA33005AD65EB76338184A418023C6DB019BB34083D83782CC47DC8D586C6FEB40570474F76A1C3589705DF7113143F72CF70873A26EE2C
Malicious:	false
Preview:	......JFIF.....,.,.....C....................................................................C............................................................................".................................................................................................................................................................................................................................,..2...,..2...,..2...,..2...,..2...,..2...,..2...,..2...,..2...,..2.@......5...M.x6..,.....E%.`....r....{...D...U..R.].U..........D..........MD.1_.z.I.~..~.,d..q.......~.#.5Xv.......v<.C...c.='..N#.6....@.u..a.V..(=^zZ..d.....8.?......f..US'..MU.3.!M@P...2>..}6.8].l..t..NV..WC.p\|._i..dw.O.c.zJ.u.K=.}...2.........}...@..C..&.JNC..9.9.....7s}.-.5..d.z}/.P<...9].&O[q..1.x..#.".............{....=&.f..]....t.<......X..X z'!..bb...g.........=.._.y..%W_...p(...<...2.GA..~9.v...2...............s....n.Y.....s7!.PeQ...A..i...r....\.'.:.Q.d.....0.........x=f...9...Q\|...e..\($...y

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 765x992, components 3
Category:	downloaded
Size (bytes):	31221
Entropy (8bit):	7.621164018210675
Encrypted:	false
SSDEEP:	768:SgbxhBALrc1mkValDimtDFSFqtG7P2fYB8:SYxhBALAEiO+sDFSFqU7+fYB8
MD5:	2D6563A2316355A57308635BA957C5EC
SHA1:	EEB9A3D34984A6E7E500AE74553E828471463C31
SHA-256:	E835542E448B0A1FC02C3AB00D5949AD72EB2ED0A4F9A6D0D2835564A8C76CE6
SHA-512:	A6F3E1E4DCC1BC416DA33005AD65EB76338184A418023C6DB019BB34083D83782CC47DC8D586C6FEB40570474F76A1C3589705DF7113143F72CF70873A26EE2C
Malicious:	false
URL:	https://pub-037acb244bd3438fb27f796720edbd4c.r2.dev/photo_2024-09-26_08-29-50.jpg
Preview:	......JFIF.....,.,.....C....................................................................C............................................................................".................................................................................................................................................................................................................................,..2...,..2...,..2...,..2...,..2...,..2...,..2...,..2...,..2...,..2.@......5...M.x6..,.....E%.`....r....{...D...U..R.].U..........D..........MD.1_.z.I.~..~.,d..q.......~.#.5Xv.......v<.C...c.='..N#.6....@.u..a.V..(=^zZ..d.....8.?......f..US'..MU.3.!M@P...2>..}6.8].l..t..NV..WC.p\|._i..dw.O.c.zJ.u.K=.}...2.........}...@..C..&.JNC..9.9.....7s}.-.5..d.z}/.P<...9].&O[q..1.x..#.".............{....=&.f..]....t.<......X..X z'!..bb...g.........=.._.y..%W_...p(...<...2.GA..~9.v...2...............s....n.Y.....s7!.PeQ...A..i...r....\.'.:.Q.d.....0.........x=f...9...Q\|...e..\($...y

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.637772175549203
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	EPAYMENT_Receipt.html
File size:	4'782 bytes
MD5:	0f82f20b08bc16dec7bde5b4d9216ecb
SHA1:	34e8455accfe1401efdd5737b1e63b424d249f20
SHA256:	d407dc16b7964f5be1753dd84af5edaf2932c30777e1655c7f2416f4d840f5f3
SHA512:	b0ca0a4182a45122351639d4075f753ad1bee2b87d43251d60230b855b55ff14e36ddcc89d268f04c6d9f90b67720c849e30d403e5c73282171128a653402675
SSDEEP:	48:tU7QQL2F2UtW5tNS19mgr9TZgELm53F9TvD6r1y+lQZMfXbodGAC1cXXU2K/U4n:7FEHiP1ZgFF97aQpCXSO
TLSH:	0AA16225D2C11555B477A6786BA3838CF76A40A7D300526D3EECB2B28FFA580C167FC8
File Content Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Interactive CAPTCHA Form with Blurry Background</title>.. <style>.. * {.. bo

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 19:05:06.588143110 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:06.588200092 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:06.588274956 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:06.589118958 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:06.589148998 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:06.673343897 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 8, 2024 19:05:06.826757908 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:06.826845884 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:06.826951981 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:06.827249050 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:06.827282906 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.086009979 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.086391926 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.086426973 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.088615894 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.088697910 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.090380907 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.090470076 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.091089010 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.091104984 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.131344080 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.296808004 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.297069073 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.297094107 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.298696041 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.298760891 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.299113035 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.299197912 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.445538998 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.445597887 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507430077 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507483959 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507522106 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507545948 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.507580996 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507647038 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507690907 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507702112 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.507723093 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507750034 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.507905960 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.507945061 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.507956982 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.512193918 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.512233973 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.512264013 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.512278080 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.512339115 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.546137094 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.594577074 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.594660997 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.594743013 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.594773054 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.594881058 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.594921112 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.594965935 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.594978094 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.595025063 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.595527887 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.595621109 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.595664978 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.595717907 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.595730066 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.596229076 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.596293926 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.596591949 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:07.598030090 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.824110985 CEST	49731	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:07.824156046 CEST	443	49731	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:08.145350933 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.145421028 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.145489931 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.145714998 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.145744085 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.623802900 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.624102116 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.624135971 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.625154018 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.625233889 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.625592947 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.625658035 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.625767946 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.625782013 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.671380043 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.909684896 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.909862041 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.909955025 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.910048008 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.910135031 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.910223961 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.910310030 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.910408974 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.914426088 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.916690111 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:08.916721106 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:08.916785955 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.000030994 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.000291109 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.000358105 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.000381947 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.000469923 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.000518084 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.000529051 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.000617027 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.000663996 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.000674963 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.001127958 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.001194954 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.001205921 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.001292944 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.001353025 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.001363993 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.001529932 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:09.001589060 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.001770020 CEST	49739	443	192.168.2.4	162.159.140.237
Oct 8, 2024 19:05:09.001792908 CEST	443	49739	162.159.140.237	192.168.2.4
Oct 8, 2024 19:05:10.424587965 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:10.424675941 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:10.424746990 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:10.425271034 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:10.425321102 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:11.076052904 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:11.076325893 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:11.076401949 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:11.077441931 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:11.077500105 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:11.173569918 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:11.174088001 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:11.218312979 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:11.218343973 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:11.225895882 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:11.225928068 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:11.226134062 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:11.228285074 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:11.228317022 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:11.265078068 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:11.885703087 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:11.885803938 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:11.891199112 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:11.891233921 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:11.891742945 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:11.937377930 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:11.964478016 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.011445045 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.147661924 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.147828102 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.147847891 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.147892952 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.147906065 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.147906065 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.147916079 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.147926092 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.191265106 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.191308022 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:12.191390038 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.191596985 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:12.191610098 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.286345959 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.286701918 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:13.287516117 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:13.287527084 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.288281918 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.289206982 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:13.335402012 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.556782961 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.556920052 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.556971073 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:13.557719946 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:13.557739019 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:13.557750940 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 19:05:13.557770967 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 19:05:19.681760073 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:19.681832075 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:19.681900978 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:19.692797899 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:19.692822933 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:20.320395947 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:20.320519924 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:20.325865030 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:20.325887918 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:20.326337099 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:20.374753952 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:20.965719938 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:20.965869904 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:20.966018915 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:21.219528913 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.263416052 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.289622068 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 8, 2024 19:05:21.295115948 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 8, 2024 19:05:21.295166016 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 8, 2024 19:05:21.419869900 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.419924021 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.419944048 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.419986010 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.419995070 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.420017004 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.420037031 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.420053959 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.420078039 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.420097113 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.420556068 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.420624018 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.420639038 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.420744896 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:21.420803070 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:21.522396088 CEST	49741	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:05:21.522430897 CEST	443	49741	172.217.18.4	192.168.2.4
Oct 8, 2024 19:05:22.220266104 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:22.220441103 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:22.220499992 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:22.428230047 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:22.428230047 CEST	49745	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:22.428308964 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:22.428337097 CEST	443	49745	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:22.629995108 CEST	49735	443	192.168.2.4	172.66.0.235
Oct 8, 2024 19:05:22.630029917 CEST	443	49735	172.66.0.235	192.168.2.4
Oct 8, 2024 19:05:56.776510954 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:56.776608944 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:56.776711941 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:56.777120113 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:56.777158976 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.439729929 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.439920902 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.443495035 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.443523884 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.443928957 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.453499079 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.495485067 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.555531025 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.555583954 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.555627108 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.555669069 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.555736065 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.555780888 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.555803061 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.641199112 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.641247034 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.641288996 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.641354084 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.641391039 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.641415119 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.643551111 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.643594980 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.643620968 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.643635988 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.643668890 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.643686056 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.727833033 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.727879047 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.727932930 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.727998972 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.728059053 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.728082895 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.729175091 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.729228020 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.729243994 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.729260921 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.729289055 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.729305983 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.730133057 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.730185032 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.730223894 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.730236053 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.730258942 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.730287075 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.731049061 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.731087923 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.731117010 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.731127977 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.731153965 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.731168985 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.814771891 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.814820051 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.814872026 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.814938068 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.814974070 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.815295935 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.815310955 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.815327883 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.815361977 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.815363884 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.815377951 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.815413952 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.815429926 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.815457106 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.816606998 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.816651106 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.816700935 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.816715002 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.816745043 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.816811085 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.817231894 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.817274094 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.817301989 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.817312956 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.817342043 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.817358017 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.817888975 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.817929029 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.817981958 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.817992926 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.818022013 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.818037987 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.818258047 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.818356037 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.818407059 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.822645903 CEST	49756	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.822678089 CEST	443	49756	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.858542919 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.858591080 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.858664989 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861306906 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861315966 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.861427069 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861435890 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861542940 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.861596107 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861660957 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861679077 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.861960888 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.861972094 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.862853050 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.862874985 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.863090992 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.863193035 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.863214016 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.863276958 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.863300085 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.864242077 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.864283085 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:57.864403009 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.864492893 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:57.864510059 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.525707006 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.529146910 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.529215097 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.530976057 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.530988932 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.532434940 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.532967091 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.532980919 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.533091068 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.533214092 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.534401894 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.534411907 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.535170078 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.535234928 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.536113977 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.536128044 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.536648035 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.536679029 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.537115097 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.537126064 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.550951004 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.551331043 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.551347971 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.552135944 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.552146912 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.633428097 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.633482933 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.633769989 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.633831024 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.634383917 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.634419918 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.634573936 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.634735107 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.634824991 CEST	443	49760	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.634895086 CEST	49760	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.634953976 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.635010004 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.635221004 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.635250092 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.635329008 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.635678053 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.635678053 CEST	49757	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.635726929 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.635757923 CEST	443	49757	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.636091948 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.636260986 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.636327982 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.638880968 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.638880968 CEST	49758	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.638897896 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.638916969 CEST	443	49758	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.642445087 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.642497063 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.642561913 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.642571926 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.642617941 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.642638922 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.642664909 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.642829895 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.642846107 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.642924070 CEST	49759	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.642930984 CEST	443	49759	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.644253969 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.644309998 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.644387960 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.645076036 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.645109892 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.650332928 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.650358915 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.650420904 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.652261019 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.652298927 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.652617931 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.653671980 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.653686047 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.654407978 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.654422045 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.654436111 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.654530048 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.654633999 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.654942036 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.654983044 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.655014992 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.655076981 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.655143976 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.655366898 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.655379057 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.655412912 CEST	49761	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.655424118 CEST	443	49761	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.659099102 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.659125090 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:58.659219980 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.659708977 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:58.659739017 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.150969028 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:59.151070118 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:59.151175976 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:59.151916027 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:59.151952028 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:59.508712053 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.509249926 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.509258986 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.509274006 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.509725094 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.509732008 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.509845018 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.509913921 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.510423899 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.510438919 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.512609005 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.512773991 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.513179064 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.513196945 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.513518095 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.513528109 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.513575077 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.513641119 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.513904095 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.513919115 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.514013052 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.514477968 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.514539957 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.514750957 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.514765024 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.611960888 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.612133026 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.612190962 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.612365961 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.612389088 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.615257025 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.615437984 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.615549088 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.615617037 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.615617037 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.615655899 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.615680933 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.616054058 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.616214037 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.616591930 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.616647005 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.616749048 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.616854906 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.616854906 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.616892099 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.616899967 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.616931915 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.617186069 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.617225885 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.618534088 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.618614912 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.618809938 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.618922949 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.618957996 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619048119 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619201899 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619261026 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.619283915 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619290113 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.619335890 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.619335890 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.619343042 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619352102 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619354963 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.619687080 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.619710922 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.619834900 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.620059967 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.620156050 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.620156050 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.620156050 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622083902 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622107983 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.622317076 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622359991 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.622363091 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622432947 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622553110 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622570992 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.622572899 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.622596979 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:05:59.755775928 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:59.755990982 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:59.757689953 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:59.757719994 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:59.758151054 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:59.769476891 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:05:59.815402031 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:05:59.922367096 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:05:59.922457933 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.033108950 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033179045 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033278942 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.033340931 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033433914 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033533096 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.033556938 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033596992 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033637047 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033662081 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.033675909 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.033715963 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.034575939 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.034646034 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.063591957 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.063591957 CEST	49767	443	192.168.2.4	20.12.23.50
Oct 8, 2024 19:06:00.063661098 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.063695908 CEST	443	49767	20.12.23.50	192.168.2.4
Oct 8, 2024 19:06:00.295933962 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.295986891 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.298767090 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.301317930 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.303307056 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.316138983 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.316159010 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.317296028 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.317301035 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.318044901 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.318052053 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.319037914 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.319042921 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.319998026 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.320033073 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.320477962 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.320482969 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.321444035 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.321463108 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.322031021 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.322037935 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.322937012 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.322948933 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.323873043 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.323878050 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.414880991 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.415045023 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.415275097 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.415620089 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.415661097 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.415689945 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.415705919 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.415997028 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.416156054 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.416215897 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.418447018 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.418459892 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.419692039 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.419802904 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.419879913 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.421257019 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.421257019 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.421272039 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.421281099 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.421633959 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.421782970 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.421940088 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.424283981 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.424288034 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.424323082 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.424329042 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.428203106 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.428334951 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.428385973 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.429501057 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.429518938 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.429534912 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.429542065 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.434735060 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.434823036 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.434889078 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.437030077 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.437123060 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.437253952 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.439343929 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.439407110 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.441956997 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.441978931 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.442059040 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.442478895 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.442507029 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.443128109 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.443142891 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.444192886 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.444278955 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.444349051 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.444447994 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.444473982 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.445992947 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.446026087 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:00.446170092 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.446366072 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:00.446391106 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.082638979 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.083122969 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.083180904 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.083600998 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.083614111 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.094417095 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.094767094 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.094794035 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.095139980 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.095149040 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.112402916 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.112909079 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.112930059 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.113538980 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.113544941 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.123419046 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.123842001 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.123903990 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.124161005 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.124176979 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.183409929 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.183571100 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.183675051 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.183725119 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.183760881 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.183788061 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.183803082 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.186852932 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.186882973 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.186939955 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.187156916 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.187167883 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.194742918 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.195092916 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.195153952 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.195185900 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.195185900 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.195203066 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.195221901 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.198023081 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.198112965 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.198245049 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.198335886 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.198368073 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.217320919 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.217381954 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.217457056 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.217588902 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.217606068 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.217619896 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.217629910 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.221523046 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.221549034 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.221754074 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.221939087 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.221951962 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.237543106 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.237692118 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.237760067 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.238010883 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.238034964 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.238059998 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.238071918 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.240789890 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.240833044 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.240885973 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.241133928 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.241149902 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.664161921 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.664822102 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.664841890 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.666207075 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.666213036 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.800331116 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.800486088 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.800544024 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.800789118 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.800789118 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.800810099 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.800822020 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.806022882 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.806111097 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.806583881 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.807002068 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.807039022 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.882023096 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.882998943 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.883028984 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.884129047 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.884145975 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.891779900 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.892282963 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.892381907 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.892816067 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.892827988 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.896290064 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.896874905 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.896905899 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.897756100 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.897762060 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.918240070 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.918793917 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.918822050 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:01.919630051 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:01.919641018 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177217007 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177270889 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177360058 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.177448034 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177483082 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177601099 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177711010 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177748919 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177771091 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.177848101 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.177911043 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.177922010 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.177922010 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.177964926 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.178014040 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.178041935 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.179034948 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.179058075 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.179172039 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.179191113 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.180469036 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.180469036 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.180501938 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.180522919 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.181813955 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.181813955 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.181879044 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.181914091 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.188666105 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.188755035 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.188900948 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.190011024 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.190107107 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.190244913 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.191704988 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.191745996 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.191917896 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.192437887 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.192476988 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.193229914 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.193263054 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.193557978 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.193578005 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.194528103 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.194536924 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.194639921 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.194742918 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.194757938 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.468771935 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.469402075 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.469465017 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.470035076 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.470047951 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.611792088 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.611939907 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.612013102 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.635291100 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.635291100 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.635371923 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.635407925 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.639039993 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.639106035 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.639175892 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.639369011 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.639408112 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.840677023 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.841347933 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.841379881 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.841948986 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.841958046 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.856157064 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.856477022 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.856506109 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.857518911 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.857531071 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.868156910 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.869173050 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.869255066 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.870114088 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.870127916 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.872061014 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.872483969 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.872508049 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.873560905 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.873572111 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.941167116 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.941312075 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.941462040 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.964406967 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.964452982 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.964497089 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.972824097 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.972974062 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.973031998 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.982775927 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.982907057 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.983107090 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.996442080 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.996474981 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.996491909 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.996500969 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.998646021 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.998651981 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:02.998673916 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:02.998680115 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.000529051 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.000570059 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.000585079 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.000592947 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.002115011 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.002115011 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.002180099 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.002216101 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.006042004 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006136894 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.006355047 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006544113 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006576061 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.006603956 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006612062 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.006628036 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006680012 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006954908 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.006989002 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.007155895 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.007172108 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.007246017 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.007258892 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.007567883 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.007591009 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.007658005 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.007819891 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.007843018 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.279819012 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.328717947 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.358076096 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.358098030 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.358731985 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.358746052 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.453979969 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.454133987 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.454421997 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.454526901 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.454556942 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.454581976 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.454596043 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.458206892 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.458300114 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.458381891 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.458580017 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.458615065 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.653543949 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.654010057 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.654033899 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.654661894 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.654715061 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.664256096 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.667982101 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.679980993 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.680042028 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.680855989 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.680869102 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.681364059 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.681451082 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.681850910 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.681906939 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.691715956 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.692027092 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.692044020 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.692548037 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.692559004 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.753423929 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.753555059 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.753820896 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.753907919 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.753907919 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.753952026 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.753984928 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.757246971 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.757368088 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.757527113 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.757797003 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.757879019 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.778162003 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.778292894 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.778346062 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.778522968 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.778522968 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.778558969 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.778580904 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.781605005 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.781687975 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.781761885 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.781918049 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.781954050 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.782267094 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.782397032 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.782545090 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.782625914 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.782627106 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.782670021 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.782699108 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.784267902 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.784322023 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.784388065 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.784533978 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.784560919 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.797053099 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.797197104 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.797270060 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.797405005 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.797430038 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.797461987 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.797476053 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.799397945 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.799426079 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:03.799608946 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.799608946 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:03.799637079 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.132456064 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.133156061 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.133241892 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.133472919 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.133487940 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.236404896 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.236550093 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.236643076 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.236812115 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.236812115 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.236857891 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.236890078 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.239968061 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.240067005 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.240148067 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.240318060 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.240345001 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.437165022 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.437769890 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.437834978 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.438296080 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.438309908 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.441150904 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.441539049 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.441622019 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.441903114 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.441916943 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.443881035 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.444358110 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.444375038 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.444704056 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.444710016 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.449908018 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.450376034 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.450463057 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.450880051 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.450933933 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.538439035 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.538574934 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.538657904 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.538741112 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.538741112 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.538784981 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.538824081 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.541264057 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.541356087 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.541439056 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.541448116 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.541585922 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.541609049 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.541632891 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.541646957 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.541737080 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.541779041 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.541821957 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.541837931 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.543658018 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.543704033 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.543764114 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.543914080 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.543930054 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.554337025 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.554481983 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.554615021 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.554652929 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.554652929 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.554668903 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.554688931 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.556736946 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.556824923 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.556927919 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.557060957 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.557100058 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.595629930 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.595783949 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.595827103 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.595963955 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.595978975 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.597982883 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.598062992 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.598201990 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.598324060 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.598346949 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.923206091 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.923763990 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.923795938 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:04.924215078 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:04.924223900 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.029720068 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.029855013 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.029966116 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.030019045 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.030019999 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.030056953 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.030077934 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.032828093 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.032902956 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.033010006 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.033154011 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.033183098 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.190670967 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.191073895 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.191093922 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.191629887 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.191634893 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.213104010 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.213568926 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.213632107 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.213845968 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.213860989 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.226922035 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.227370024 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.227431059 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.227708101 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.227761030 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.247930050 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.248313904 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.248359919 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.248692036 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.248703003 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.289428949 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.289582014 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.289647102 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.289731026 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.289746046 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.289756060 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.289761066 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.292428970 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.292521000 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.292603970 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.292725086 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.292747974 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.318460941 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.318592072 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.318703890 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.318703890 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.318703890 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.320480108 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.320513964 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.320641994 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.320787907 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.320808887 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.331669092 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.331821918 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.332007885 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.332009077 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.332009077 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.333666086 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.333753109 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.333970070 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.334095955 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.334130049 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.348072052 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.348217010 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.348283052 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.348330021 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.348330021 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.348360062 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.348381996 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.350023985 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.350045919 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.350182056 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.350301981 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.350325108 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.625530958 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.625597954 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.641213894 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.641279936 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.719851017 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.720422983 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.720462084 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.721016884 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.721029043 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.831490040 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.831636906 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.831749916 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.832632065 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.832670927 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.832720041 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.832736015 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.835427046 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.835469961 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.835659027 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.835659027 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.835699081 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.942713976 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.943248034 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.943310022 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.943561077 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.943577051 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.997347116 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.997674942 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.997709990 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:05.998034954 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:05.998049974 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.008920908 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.009253025 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.009280920 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.009574890 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.009584904 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.065751076 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.065871000 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.066076040 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.067342043 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.067342043 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.067408085 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.067440987 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.069782972 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.069812059 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.069983959 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.069983959 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.070010900 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.071660042 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.072092056 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.072120905 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.072489023 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.072495937 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.097352982 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.097498894 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.097661018 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.097712994 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.097713947 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.097743034 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.097771883 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.100548029 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.100564957 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.100812912 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.100934982 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.100945950 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.112087965 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.112255096 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.112344980 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.112375975 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.112391949 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.112413883 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.112426043 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.114408016 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.114496946 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.114582062 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.114696980 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.114733934 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.176917076 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.177035093 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.177151918 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.177151918 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.177177906 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.177187920 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.178895950 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.178980112 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.179208994 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.179209948 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.179343939 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.509098053 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.509639978 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.509671926 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.510107994 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.510113001 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.744152069 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.744651079 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.744663954 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.745057106 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.745062113 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.753580093 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.753942966 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.753952980 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.754605055 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.754610062 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.773570061 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.773991108 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.774049997 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.774483919 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.774537086 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.785057068 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.785262108 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.785321951 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.785397053 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.785418034 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.785439968 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.785448074 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.788734913 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.788829088 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.788911104 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.789024115 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.789042950 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.855634928 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.855695963 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.855827093 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.855850935 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.855865002 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.855875015 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.855880022 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.858757019 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.858844995 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.858931065 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.859096050 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.859129906 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.861736059 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.861885071 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.861932039 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.861998081 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.862004042 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.862015009 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.862018108 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.863382101 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.863820076 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.863881111 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.864120960 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.864135981 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.864219904 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.864274979 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.864428043 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.864537954 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.864569902 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.875849962 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.875994921 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.876173019 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.876173019 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.876173019 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.879076004 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.879143953 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.879206896 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.879340887 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.879371881 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.977026939 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.977170944 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.977755070 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.977755070 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.977755070 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.980904102 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.980951071 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:06.981132984 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.981228113 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:06.981244087 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.188002110 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.188030958 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.281852007 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.281913042 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.498065948 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.499130011 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.499208927 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.499912977 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.499926090 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.525693893 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.526134014 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.526149988 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.526825905 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.526834965 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.530307055 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.530729055 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.530788898 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.531296968 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.531312943 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.575762033 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.576761007 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.576797009 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.577924013 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.577929974 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.602756023 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.602906942 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.602976084 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.603281975 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.603281975 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.603317976 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.603338957 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.606316090 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.606357098 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.606484890 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.606659889 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.606667995 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.627715111 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.627779007 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.628000975 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.628163099 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.628175974 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.630593061 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.630624056 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.630707026 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.630903006 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.630917072 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.662386894 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.663258076 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.663288116 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.664330006 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.664339066 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.677659988 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.677800894 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.678014994 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.678164005 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.678189039 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.678200960 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.678206921 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.682259083 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.682301044 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.682352066 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.682691097 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.682708025 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.739093065 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.739249945 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.739451885 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.739453077 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.739453077 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.741141081 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.741225004 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.741302967 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.741446018 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.741465092 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.763844967 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.763992071 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.764189959 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.764228106 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.764228106 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.764245987 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.764257908 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.766052008 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.766134024 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.766208887 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.766383886 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:07.766419888 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:07.914730072 CEST	61792	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:06:07.919749975 CEST	53	61792	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:07.919847012 CEST	61792	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:06:07.919886112 CEST	61792	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:06:07.924925089 CEST	53	61792	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:08.047405958 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.047467947 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.110193014 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 8, 2024 19:06:08.116513968 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 8, 2024 19:06:08.116672993 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 8, 2024 19:06:08.276452065 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.276870966 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.276902914 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.278333902 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.278340101 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.281820059 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.282823086 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.282844067 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.283349037 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.283355951 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.306205034 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.307149887 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.307183027 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.308414936 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.308428049 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.342355013 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.342958927 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.342998981 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.343633890 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.343645096 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.375857115 CEST	53	61792	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:08.376940012 CEST	61792	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:06:08.378587961 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.378662109 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.378839016 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.379319906 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.379336119 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.379349947 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.379357100 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.382596016 CEST	53	61792	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:08.382658005 CEST	61792	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:06:08.385502100 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.385560036 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.385646105 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.385957956 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.385993004 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.386488914 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.386630058 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.386729956 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.387006044 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.387017012 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.387041092 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.387047052 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.391423941 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.391488075 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.391560078 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.392072916 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.392098904 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.410213947 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.410362005 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.410422087 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.410654068 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.410681963 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.410708904 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.410723925 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.414483070 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.414511919 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.414594889 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.414951086 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.414963007 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.442589045 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.442728043 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.442872047 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.443015099 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.443015099 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.443052053 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.443078995 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.447017908 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.447102070 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.447196960 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.447382927 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.447412014 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.451986074 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.452423096 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.452452898 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.453056097 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.453068018 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.557287931 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.557465076 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.557528019 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.558056116 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.558078051 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.558101892 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.558113098 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.561547041 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.561630964 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:08.561806917 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.561938047 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:08.561961889 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.121854067 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.122405052 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.122467041 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.122736931 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.122751951 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.122775078 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.123126030 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.123176098 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.123473883 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.123486996 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.125200033 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.125497103 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.125514030 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.125890017 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.125894070 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.191453934 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.192012072 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.192073107 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.192342043 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.192357063 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.225940943 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226001024 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226167917 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.226254940 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.226254940 CEST	61794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.226296902 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226336002 CEST	443	61794	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226386070 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226572990 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226633072 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.226731062 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.226731062 CEST	61795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.226752043 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226773024 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226785898 CEST	443	61795	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226903915 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.226941109 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.227751017 CEST	61796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.227766991 CEST	443	61796	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.229423046 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.229444981 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.229556084 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.229824066 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.229870081 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.229940891 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.229967117 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.229978085 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.230073929 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.230122089 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.230155945 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.230170965 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.230187893 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.230328083 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.230343103 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.306513071 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.306659937 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.306760073 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.306839943 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.306884050 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.306922913 CEST	61797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.306941032 CEST	443	61797	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.309262037 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.309278965 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.309329033 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.309484959 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.309490919 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.330231905 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.330552101 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.330574036 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.330926895 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.330938101 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.477288961 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.478573084 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.478699923 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.478699923 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.478699923 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.482285976 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.482323885 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.482443094 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.482592106 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.482616901 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.688045979 CEST	61798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.688111067 CEST	443	61798	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.919795990 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.920418978 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.920434952 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.921245098 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.921251059 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.923455954 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.924086094 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.924118042 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.924607992 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.924612999 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.938699007 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.939162016 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.939198017 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.939888000 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.939899921 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.965542078 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.966356993 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.966366053 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:09.966999054 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:09.967004061 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.018742085 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.018883944 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.018963099 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.019254923 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.019277096 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.019337893 CEST	61799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.019342899 CEST	443	61799	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.023113966 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.023168087 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.023272991 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.023561954 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.023581982 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.027098894 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.027239084 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.027318954 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.027600050 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.027600050 CEST	61801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.027614117 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.027625084 CEST	443	61801	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.030086994 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.030168056 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.030247927 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.030349970 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.030384064 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.077541113 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.077600956 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.077696085 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.077842951 CEST	61802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.077848911 CEST	443	61802	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.080355883 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.080384016 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.080528021 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.080624104 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.080647945 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.081485987 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.081553936 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.081634998 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.081841946 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.081882000 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.081938982 CEST	61800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.081959009 CEST	443	61800	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.085253000 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.085294962 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.085427046 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.085656881 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.085678101 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.167984009 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.168556929 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.168617010 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.169083118 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.169097900 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.284156084 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.284336090 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.284538031 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.284730911 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.284775972 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.284809113 CEST	61803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.284822941 CEST	443	61803	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.288923979 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.289010048 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.289110899 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.289469004 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.289508104 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.717361927 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.717859030 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.717919111 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.718271971 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.718286037 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.721791983 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.722103119 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.722126007 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.722453117 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.722459078 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.742595911 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.742908955 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.742923975 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.743242025 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.743252039 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.757617950 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.757951975 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.757963896 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.758290052 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:10.758296013 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:10.773454905 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:10.773545980 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:10.773966074 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:10.774282932 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:10.774303913 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:11.043925047 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044038057 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044049025 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044095039 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044121027 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044131041 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044219971 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044253111 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044287920 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044305086 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044327021 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044348001 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044379950 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044399023 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044415951 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044415951 CEST	61806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044449091 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.044450045 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.044471025 CEST	443	61806	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.045880079 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.045914888 CEST	61807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.045922995 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.045937061 CEST	443	61807	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.047032118 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.047045946 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.047077894 CEST	61805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.047091961 CEST	443	61805	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.048036098 CEST	61804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.048042059 CEST	443	61804	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.050993919 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.051028013 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.051146984 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.051198959 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.052515984 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.052598000 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.052751064 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.053303003 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.053338051 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.053672075 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.053697109 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.054143906 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.054157019 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.055073977 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.055105925 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.055205107 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.055221081 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.055231094 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.055361032 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.055376053 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.056088924 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.056175947 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.056252956 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.056461096 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.056493044 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.213623047 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.213684082 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.214086056 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.214154005 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.214395046 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.214420080 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.214432001 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.214759111 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.214833975 CEST	443	61808	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.215003967 CEST	61808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.216862917 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.216953039 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.217035055 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.217267990 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.217302084 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.450913906 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:11.451498032 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:11.451560020 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:11.452044010 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:11.452378035 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:11.452472925 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:11.500617981 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:11.712201118 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.712352037 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.712672949 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.712737083 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.712781906 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.712842941 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.713221073 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.713234901 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.713345051 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.713360071 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.713707924 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.714010954 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.714087963 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.714325905 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.714340925 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.721431971 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.721765041 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.721787930 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.722095966 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.722107887 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819097042 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819129944 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819221973 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819238901 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819241047 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819310904 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819359064 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819411039 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819492102 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819492102 CEST	61811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819541931 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819541931 CEST	61813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.819551945 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819578886 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819580078 CEST	443	61811	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.819603920 CEST	443	61813	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.820564032 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.820632935 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.820769072 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.820947886 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.820947886 CEST	61812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.820982933 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.821005106 CEST	443	61812	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.822582006 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.822628021 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.822665930 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.822694063 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.822731972 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.822827101 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.822906017 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.822936058 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.822990894 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823024035 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823267937 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823321104 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823370934 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823395967 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823473930 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823529005 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823550940 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823565960 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823575974 CEST	61810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823581934 CEST	443	61810	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823653936 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823683023 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.823806047 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823932886 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.823949099 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.825289011 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.825294971 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.825411081 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.825515032 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.825517893 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.872652054 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.872981071 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.873008013 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.873356104 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.873367071 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.974472046 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.974549055 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.974628925 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.974898100 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.974951029 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.974982977 CEST	61814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.974999905 CEST	443	61814	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.977808952 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.977899075 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:11.977977037 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.978141069 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:11.978177071 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.473789930 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.474270105 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.474318981 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.474694014 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.474703074 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.474721909 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.475044966 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.475065947 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.475269079 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.475481033 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.475485086 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.475594044 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.475600004 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.475995064 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.475999117 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.490267992 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.490572929 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.490607977 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.490945101 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.490955114 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.576082945 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.576958895 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.577018976 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.577081919 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.577081919 CEST	61817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.577101946 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.577111006 CEST	443	61817	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.579974890 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.579988003 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.580058098 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.580136061 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.580137014 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.580379009 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.580456018 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.580456972 CEST	61818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.580461979 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.580468893 CEST	443	61818	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.581722975 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.581757069 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.582778931 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.582838058 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.583045006 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.583173037 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.583190918 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.591696024 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.591866970 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.591945887 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.591990948 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.592015028 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.592030048 CEST	61815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.592036963 CEST	443	61815	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.593378067 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.593885899 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.593903065 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.593965054 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.593987942 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.594048023 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.594068050 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.594080925 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.594114065 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.594115019 CEST	61816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.594145060 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.594170094 CEST	443	61816	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.596030951 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.596081018 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.596159935 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.596276045 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.596299887 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.626090050 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.626470089 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.626492023 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.626986980 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.626997948 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.726983070 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.727062941 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.727123022 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.727345943 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.727372885 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.727418900 CEST	61819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.727432966 CEST	443	61819	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.730524063 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.730618000 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:12.730700970 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.730864048 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:12.730899096 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.255366087 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.255882025 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.255939960 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.256407976 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.256419897 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.256788015 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.257112980 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.257150888 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.257488966 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.257502079 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.259191036 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.259522915 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.259536982 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.259835005 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.259845018 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.280420065 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.280734062 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.280750036 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.281152010 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.281162024 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.359185934 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.359250069 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.359431028 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.359513044 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.359513044 CEST	61822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.359540939 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.359563112 CEST	443	61822	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.362278938 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.362314939 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.362565994 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.362675905 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.362906933 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.362921000 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.362938881 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.363071918 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.363131046 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.363131046 CEST	61820	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.363169909 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.363194942 CEST	443	61820	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.365562916 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.365645885 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.365739107 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.365928888 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.365962029 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.366158962 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.366241932 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.366281033 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.366286993 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.366318941 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.366342068 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.366372108 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.366372108 CEST	61823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.366388083 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.366406918 CEST	443	61823	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.367912054 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.368000984 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.368161917 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.368268967 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.368292093 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.370636940 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.371074915 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.371093988 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.371512890 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.371522903 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.388277054 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.388406038 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.388717890 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.388719082 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.388719082 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.390234947 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.390274048 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.390378952 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.390500069 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.390518904 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.470093012 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.470350027 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.470463037 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.470503092 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.470503092 CEST	61824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.470520973 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.470530987 CEST	443	61824	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.472223043 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.472307920 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.472398043 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.472532988 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.472552061 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:13.688083887 CEST	61821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:13.688146114 CEST	443	61821	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.006031036 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.006567001 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.006601095 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.007293940 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.007304907 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.298654079 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.298727989 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.298818111 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.298825026 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.298906088 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.299000978 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.299017906 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.299027920 CEST	61825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.299032927 CEST	443	61825	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.301779032 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.301856995 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.302118063 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.302263975 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.302284002 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.303224087 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.303577900 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.303613901 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.303968906 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.303981066 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.306252956 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.306257963 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.306571007 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.306596041 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.306660891 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.306678057 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.306948900 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.306960106 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.307040930 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.307049990 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.308561087 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.308938980 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.308957100 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.309261084 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.309272051 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.404242992 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.404684067 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.404797077 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.404797077 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.405021906 CEST	61827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.405050993 CEST	443	61827	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.406371117 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.406512976 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.407286882 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.407349110 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.407361031 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.407361984 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.407392025 CEST	61828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.407402992 CEST	443	61828	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.407428980 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.407582998 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.407609940 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.409373999 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.409414053 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.409514904 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.409579992 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.409590960 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.411417961 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.411457062 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.411493063 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.411633015 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.411633015 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.411710024 CEST	61826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.411746979 CEST	443	61826	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.412261009 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.412367105 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.412492037 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.412492037 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.412864923 CEST	61829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.412904024 CEST	443	61829	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.414239883 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.414239883 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.414310932 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.414344072 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.414412975 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.414412975 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.414516926 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.414531946 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.414622068 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.414647102 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.985843897 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.987248898 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.987312078 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:14.989495993 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:14.989511013 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.082036018 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.082730055 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.082776070 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.083702087 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.097371101 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.097383022 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.097733974 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.097774982 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.103238106 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.106630087 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.106641054 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.107408047 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.107428074 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.107649088 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.107655048 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.114557981 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.115092039 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.115107059 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.125940084 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.125950098 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.127289057 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.127505064 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.127583981 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.138144016 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.138144016 CEST	61830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.138187885 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.138221025 CEST	443	61830	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.151657104 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.151693106 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.151828051 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.152072906 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.152091026 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.204602957 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.204907894 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.205025911 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.205075979 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.205137014 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.205343008 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.205370903 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.205420971 CEST	61833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.205435991 CEST	443	61833	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.208338022 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.208374023 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.208564043 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.209184885 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.209207058 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.210295916 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.210710049 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.211121082 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.219110966 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.219111919 CEST	61832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.219127893 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.219132900 CEST	443	61832	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.221623898 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.221671104 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.221769094 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.224783897 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.224801064 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.231553078 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.231699944 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.231906891 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.231906891 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.232047081 CEST	61834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.232059956 CEST	443	61834	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.234935045 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.234947920 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.235016108 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.235481977 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.235496998 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.237262964 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.237391949 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.237535000 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.237587929 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.237587929 CEST	61831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.237608910 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.237620115 CEST	443	61831	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.240365982 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.240377903 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.240912914 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.241069078 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.241081953 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.719346046 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.720170975 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.720204115 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.720622063 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.720629930 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.821587086 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.821784019 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.821846008 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.821876049 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.821902037 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.821952105 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.822000027 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.822015047 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.822027922 CEST	61835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.822033882 CEST	443	61835	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.825140953 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.825210094 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.825289965 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.825489998 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.825512886 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.867827892 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.868233919 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.868273020 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.868699074 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.868712902 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.881375074 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.881814957 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.881845951 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.882174969 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.882184982 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.894263029 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.894619942 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.894633055 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.894995928 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.895000935 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.918287992 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.918571949 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.918579102 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.918894053 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.918898106 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.966742992 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.966833115 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.966886997 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.967092991 CEST	61837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.967122078 CEST	443	61837	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.970212936 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.970262051 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.970355988 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.970490932 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.970520020 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.981977940 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.982969999 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.983036995 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.983110905 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.983130932 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.983154058 CEST	61838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.983167887 CEST	443	61838	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.986363888 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.986392975 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.986469984 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.986735106 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:15.986749887 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:15.999912024 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.000063896 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.000118971 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.000184059 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.000200033 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.000212908 CEST	61836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.000216961 CEST	443	61836	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.003307104 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.003407955 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.003509998 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.003721952 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.003757954 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.022932053 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.022967100 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.023009062 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.023015022 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.023045063 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.023152113 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.023156881 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.023164988 CEST	61839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.023168087 CEST	443	61839	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.025521040 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.025603056 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.025679111 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.025907040 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.025939941 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.511605978 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.512521029 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.512592077 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.513075113 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.513087988 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.611840010 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.612802029 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.612868071 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.612971067 CEST	61840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.613001108 CEST	443	61840	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.617932081 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.618006945 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.618084908 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.618330956 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.618362904 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.637336969 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.637970924 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.637984037 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.638987064 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.638993025 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.668986082 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.669596910 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.669609070 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.670629978 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.670634985 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.672445059 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.673183918 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.673203945 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.674587965 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.674598932 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.681974888 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.682413101 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.682499886 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.683516026 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.683535099 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.739403963 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.739578962 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.739639997 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.771564007 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.771661043 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.771711111 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.774652004 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.774991989 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.775089979 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.775104046 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.775166035 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.775806904 CEST	61841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.775830030 CEST	443	61841	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.778763056 CEST	61842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.778789997 CEST	443	61842	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.781547070 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.781547070 CEST	61843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.781582117 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.781606913 CEST	443	61843	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.783507109 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.783694029 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.783795118 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.784519911 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.784565926 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.784596920 CEST	61844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.784612894 CEST	443	61844	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.789755106 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.789804935 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.789875984 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.790193081 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.790245056 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.790311098 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.790669918 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.790761948 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.790844917 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.793220043 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.793248892 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.793307066 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.793766975 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.793781042 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.794337988 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.794358015 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.794540882 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.794574976 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:16.794948101 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:16.794985056 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.269480944 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.272490978 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.272547960 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.275929928 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.275947094 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.376492023 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.377197981 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.377269983 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.377336025 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.377336979 CEST	61845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.377374887 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.377398014 CEST	443	61845	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.380970001 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.381004095 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.381242990 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.381511927 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.381522894 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.457103968 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.457727909 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.457752943 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.458343983 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.458349943 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.460504055 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.460980892 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.460990906 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.461545944 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.461550951 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.464828968 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.465267897 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.465317011 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.466013908 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.466026068 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.472560883 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.473067999 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.473145962 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.473860979 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.473885059 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.558433056 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.558469057 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.558516979 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.558540106 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.558573008 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.559204102 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.559221983 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.559233904 CEST	61848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.559241056 CEST	443	61848	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.560955048 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.562438011 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.562520027 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.563731909 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.563754082 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.563848972 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.564094067 CEST	61849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.564102888 CEST	443	61849	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.565890074 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.565905094 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.568267107 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.568310022 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.569168091 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.569746017 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.569762945 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.570444107 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.570589066 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.571311951 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.571546078 CEST	61846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.571573019 CEST	443	61846	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.574836016 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.574928999 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.575011969 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.575453997 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.575490952 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.577516079 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.578417063 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.578499079 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.579153061 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.579154015 CEST	61847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.579196930 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.579279900 CEST	443	61847	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.581522942 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.581543922 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:17.581728935 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.582447052 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:17.582472086 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.028870106 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.029632092 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.029650927 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.030179024 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.030184031 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.130502939 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.130651951 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.130723000 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.130964994 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.130981922 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.130990982 CEST	61850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.130995989 CEST	443	61850	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.133672953 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.133775949 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.133857965 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.133996010 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.134016991 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.221035957 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.221436024 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.221461058 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.221967936 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.221980095 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.223465919 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.223798990 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.223896980 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.224150896 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.224164963 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.256824970 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.257105112 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.257126093 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.257426977 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.257431984 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.266328096 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.266627073 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.266674042 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.266935110 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.266947985 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.529964924 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530016899 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530066967 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.530070066 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530114889 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.530277014 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530276060 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530312061 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530394077 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530405998 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530441999 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.530473948 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.530476093 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530482054 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.530514002 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.530544996 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.531013012 CEST	61853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.531033039 CEST	443	61853	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.534003973 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.534024954 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.534039021 CEST	61851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.534045935 CEST	443	61851	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.536689997 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.536695957 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.536725998 CEST	61854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.536732912 CEST	443	61854	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.538626909 CEST	61852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.538650990 CEST	443	61852	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.545411110 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.545444012 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.545650959 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.546546936 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.546570063 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.546636105 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.548038960 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.548047066 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.548108101 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.548183918 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.548212051 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.548448086 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.548464060 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.548810005 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.548823118 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.550363064 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.550390005 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:18.550487041 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.550631046 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:18.550647020 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.790472031 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.791054964 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.791109085 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.791505098 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.791520119 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.912506104 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.912908077 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.912913084 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913188934 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913232088 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913461924 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913486958 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913489103 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913537025 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913557053 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913599968 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913647890 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913841009 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913851976 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913892031 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913908958 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913917065 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913919926 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.913953066 CEST	61855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.913966894 CEST	443	61855	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.916618109 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.916692019 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:19.916886091 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.917124987 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:19.917167902 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.033457041 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.033833981 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.033864975 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.034221888 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.034230947 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.034310102 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.034591913 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.034632921 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.034926891 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.034939051 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.103267908 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.103493929 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.103549957 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.103676081 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.103687048 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.103699923 CEST	61856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.103705883 CEST	443	61856	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.104487896 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.104867935 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.104923010 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.105021000 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.105021000 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.105652094 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.105674982 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.105691910 CEST	61858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.105700016 CEST	443	61858	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.108304024 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.108340979 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.108401060 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.109112024 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.109131098 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.109832048 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.109848976 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.109898090 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.110076904 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.110091925 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.301326990 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.301477909 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.301599979 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.301644087 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.301644087 CEST	61857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.301664114 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.301680088 CEST	443	61857	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.304013014 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.304091930 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.304168940 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.304327011 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.304341078 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.379355907 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.379466057 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.379573107 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.379576921 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.379681110 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.379682064 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.379682064 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.381619930 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.381654024 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.381741047 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.381844044 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.381855011 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.687604904 CEST	61859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.687674046 CEST	443	61859	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.854266882 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.857781887 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.857845068 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.861562967 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.861577988 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.973052979 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.973205090 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.973526001 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.973526001 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.973526001 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.976430893 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.976525068 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:20.976699114 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.976810932 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:20.976830006 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.020905018 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.021282911 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.021303892 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.021694899 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.021698952 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.031677008 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.032190084 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.032197952 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.032426119 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.032428980 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.125586033 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.125650883 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.125821114 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.125821114 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.126427889 CEST	61862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.126435995 CEST	443	61862	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.127984047 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.128067970 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.128262997 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.128262997 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.128339052 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.135512114 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.135693073 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.135766983 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.135766983 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.135881901 CEST	61861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.135885000 CEST	443	61861	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.137501955 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.137587070 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.137721062 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.137780905 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.137799025 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.163358927 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.163670063 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.163711071 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.164067030 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.164079905 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.180119038 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.180903912 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.180905104 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.180968046 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.181026936 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.187452078 CEST	61860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.187483072 CEST	443	61860	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.412476063 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:21.412604094 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:21.412704945 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:21.425909996 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.425939083 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.425986052 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.426012993 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.426080942 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.426186085 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.426225901 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.426253080 CEST	61863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.426269054 CEST	443	61863	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.428395987 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.428533077 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.428714991 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.428714991 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.428714991 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.428822994 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.428889990 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.429063082 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.429198027 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.429218054 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.430624008 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.430649996 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.430869102 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.430941105 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.430958986 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.709451914 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.709914923 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.709948063 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.710311890 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.710319996 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.734397888 CEST	61864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.734458923 CEST	443	61864	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.810257912 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.810429096 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.810487032 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.810499907 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.810532093 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.810575008 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.810638905 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.810656071 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.810667992 CEST	61865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.810673952 CEST	443	61865	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.813250065 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.813277960 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.813338041 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.813482046 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.813487053 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.880286932 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.880661964 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.880673885 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.881251097 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.881254911 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.883987904 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.884304047 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.884361029 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.884839058 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.884851933 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.980573893 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.981384039 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.981532097 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.981578112 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.981578112 CEST	61866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.981600046 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.981611013 CEST	443	61866	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.984052896 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.984138966 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.984256029 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.984457970 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.984492064 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.988280058 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.988465071 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.988611937 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.988688946 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.988688946 CEST	61867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.988730907 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.988756895 CEST	443	61867	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.990502119 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.990523100 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:21.990633011 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.990739107 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:21.990746975 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.074588060 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.074959040 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.075020075 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.075280905 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.075294971 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.078805923 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.079123020 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.079133987 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.079447985 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.079452991 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.204821110 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.204968929 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.205120087 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.205251932 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.205251932 CEST	61868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.205290079 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.205312014 CEST	443	61868	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.207284927 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.207362890 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.207434893 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.207555056 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.207572937 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.211606026 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.211725950 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.211787939 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.211797953 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.211831093 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.211872101 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.211929083 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.211941957 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.211949110 CEST	61869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.211954117 CEST	443	61869	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.213891029 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.213915110 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.213988066 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.214132071 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.214159966 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.670723915 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.671717882 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.671746969 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.673659086 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.673664093 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.770004988 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.770150900 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.770447969 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.770613909 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.770613909 CEST	61870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.770627975 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.770634890 CEST	443	61870	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.777436972 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.777462959 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.778420925 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.778420925 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.778444052 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.783719063 CEST	61809	443	192.168.2.4	172.217.18.4
Oct 8, 2024 19:06:22.783785105 CEST	443	61809	172.217.18.4	192.168.2.4
Oct 8, 2024 19:06:22.788559914 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.789655924 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.789664030 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.793576002 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.793659925 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.793677092 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.794079065 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.794138908 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.794508934 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.794523954 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.889383078 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.889827013 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.889997005 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.889998913 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.889998913 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.893677950 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.894404888 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.894453049 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.894603968 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.894604921 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.895137072 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.895138025 CEST	61871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.895179987 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.895191908 CEST	443	61871	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.897382021 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.897468090 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.898504019 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.898502111 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.898587942 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.899301052 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.899334908 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.899375916 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.899600029 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.899636030 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.970367908 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.971028090 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.971076012 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.971524954 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.971538067 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.982600927 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.983125925 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.983140945 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:22.985609055 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:22.985619068 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.074228048 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.074378014 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.074465036 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.085309029 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.085338116 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.085377932 CEST	61874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.085396051 CEST	443	61874	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.087033987 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.087182045 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.087311983 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.097886086 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.097898960 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.098434925 CEST	61873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.098444939 CEST	443	61873	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.107515097 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.107578993 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.107764959 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.107949018 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.107966900 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.113531113 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.113615990 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.115521908 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.116476059 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.116511106 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.189244986 CEST	61872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.189271927 CEST	443	61872	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.439913988 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.440380096 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.440395117 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.440845013 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.440851927 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.539556980 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.539704084 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.539757967 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.539875984 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.539900064 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.539940119 CEST	61875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.539947987 CEST	443	61875	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.542567015 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.542654037 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.542737961 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.542896986 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.542918921 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.543502092 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.543839931 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.543896914 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.544312954 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.544327021 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.574332952 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.574666023 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.574724913 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.575046062 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.575063944 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.642859936 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.643515110 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.643587112 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.643651009 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.643651009 CEST	61877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.643692970 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.643714905 CEST	443	61877	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.646802902 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.646886110 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.646966934 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.647129059 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.647157907 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.681217909 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.681369066 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.681438923 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.681519985 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.681519985 CEST	61876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.681561947 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.681595087 CEST	443	61876	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.683517933 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.683547974 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.683603048 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.683738947 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.683751106 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.754925013 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.755719900 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.755779028 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.756444931 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.756458998 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.784512997 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.807018995 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.807079077 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.807707071 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.807720900 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.855595112 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.855775118 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.855846882 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.856187105 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.856187105 CEST	61878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.856219053 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.856241941 CEST	443	61878	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.867053986 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.867141962 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.867218971 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.868012905 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.868047953 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.910084009 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.910154104 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.910218000 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.910279036 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.910316944 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.910371065 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.910603046 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.910603046 CEST	61879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.910636902 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.910660028 CEST	443	61879	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.919905901 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.919991016 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:23.920067072 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.921272039 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:23.921305895 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.192044973 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.197367907 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.197388887 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.214863062 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.214869022 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.326112986 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.326857090 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.326878071 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.327869892 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.327874899 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.385687113 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.385848999 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.386215925 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.386316061 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.386329889 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.386337996 CEST	61881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.386343002 CEST	443	61881	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.391450882 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.391544104 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.391613960 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.391906023 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.391942978 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.409518003 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.409914970 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.409928083 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.410567999 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.410573959 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.493437052 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.493576050 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.493949890 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.494051933 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.494066954 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.494077921 CEST	61882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.494083881 CEST	443	61882	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.497806072 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.497880936 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.497965097 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.498153925 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.498172045 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.568331003 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.568531036 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.568581104 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.568878889 CEST	61883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.568892956 CEST	443	61883	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.572716951 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.572736025 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.572846889 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.573101044 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.573122025 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.642091990 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.652542114 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.652637959 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.653064966 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.653085947 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.658041954 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.658416986 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.658494949 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.659609079 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.659622908 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.755220890 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.755251884 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.755302906 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.755352974 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.755469084 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.755613089 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.755613089 CEST	61885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.755656958 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.755685091 CEST	443	61885	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.757997990 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.758038998 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.758255959 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.758400917 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.758408070 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.760390043 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.760418892 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.760473967 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.760514021 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.760556936 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.760658979 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.760659933 CEST	61884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.760695934 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.760719061 CEST	443	61884	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.762537003 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.762545109 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:24.762598991 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.762741089 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:24.762749910 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.118079901 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.118942022 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.119029999 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.119565964 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.119580984 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.211070061 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.211435080 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.211482048 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.212327957 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.212341070 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.219866991 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.219914913 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.220016003 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.220103979 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.220103979 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.220318079 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.220364094 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.220395088 CEST	61886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.220411062 CEST	443	61886	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.225514889 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.225547075 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.225598097 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.225877047 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.225892067 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.301542997 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.302151918 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.302161932 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.302944899 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.302947998 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.311676025 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.311815977 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.312210083 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.312324047 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.312355042 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.312380075 CEST	61887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.312395096 CEST	443	61887	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.341938972 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.341999054 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.342907906 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.343292952 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.343324900 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.402601004 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.402671099 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.402748108 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.402765036 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.402781010 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.402832031 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.402832031 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.402854919 CEST	61888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.402864933 CEST	443	61888	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.405898094 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.405987978 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.406085968 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.406316042 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.406349897 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.460021019 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.460478067 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.460508108 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.461457968 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.461464882 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.470422029 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.470925093 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.470933914 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.471663952 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.471669912 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.561292887 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.561356068 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.561512947 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.561578035 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.561598063 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.561629057 CEST	61889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.561636925 CEST	443	61889	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.564470053 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.564554930 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.564703941 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.564811945 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.564831972 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.571866989 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.571918011 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.572032928 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.572108030 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.572125912 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.572125912 CEST	61890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.572134018 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.572143078 CEST	443	61890	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.575083017 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.575138092 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.575319052 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.575623989 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.575653076 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.905422926 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.906136036 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.906156063 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:25.906907082 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:25.906912088 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.003985882 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.004756927 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.004868031 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.004924059 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.004968882 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.004968882 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.004987955 CEST	61891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.005002975 CEST	443	61891	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.007703066 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.007741928 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.007966995 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.008136034 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.008152008 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.039707899 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.040111065 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.040175915 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.040549994 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.040564060 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.214648962 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.214708090 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.214812040 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.214870930 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.214932919 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.214975119 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.214975119 CEST	61892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.215017080 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.215044022 CEST	443	61892	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.217546940 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.217634916 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.217775106 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.217969894 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.217988968 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.470251083 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.470827103 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.470916986 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.471139908 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.471155882 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.472721100 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.473041058 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.473098040 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.473352909 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.473365068 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.707634926 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.707753897 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.707854033 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.707905054 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.708020926 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.709007025 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.821923018 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.821969986 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.822004080 CEST	61894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.822020054 CEST	443	61894	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.823426962 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.823426962 CEST	61895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.823498964 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.823530912 CEST	443	61895	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.835805893 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.835844040 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.835966110 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.836261988 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.836281061 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.836816072 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.836862087 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:26.837044954 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.837131977 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:26.837142944 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.074018955 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.106232882 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.106256962 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.106750965 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.106756926 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.186698914 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.187222958 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.187249899 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.187724113 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.187731028 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.195235968 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.195765972 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.195801973 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.196247101 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.196261883 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.205159903 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.205199957 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.205240965 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.205252886 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.205267906 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.205321074 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.205465078 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.205481052 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.205509901 CEST	61896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.205517054 CEST	443	61896	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.208852053 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.208894968 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.209099054 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.209227085 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.209242105 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.294934988 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.295093060 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.295159101 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.295212030 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.295212030 CEST	61897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.295233965 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.295244932 CEST	443	61897	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.297597885 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.297681093 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.297749996 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.297872066 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.297898054 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.301340103 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.301779032 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.301911116 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.301911116 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.302217007 CEST	61893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.302241087 CEST	443	61893	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.303886890 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.303910017 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.303978920 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.304075956 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.304097891 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.790636063 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.791153908 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.791212082 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.791557074 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.791569948 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.798607111 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.798939943 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.798971891 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.799284935 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.799293041 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.846167088 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.846534967 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.846556902 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.846926928 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.846932888 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891218901 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891289949 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891351938 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.891376019 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891426086 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891482115 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.891529083 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891558886 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.891558886 CEST	61898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.891581059 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.891598940 CEST	443	61898	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.894253016 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.894283056 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.894371033 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.894565105 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.894571066 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.908690929 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.908762932 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.908822060 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.908946037 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.908966064 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.908986092 CEST	61899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.908993006 CEST	443	61899	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.913486004 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.913569927 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.913659096 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.913800955 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.913820982 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.946592093 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.946639061 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.946691036 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.946744919 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.946810961 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.946824074 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.946854115 CEST	61900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.946861982 CEST	443	61900	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.948940992 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.949032068 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.949162960 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.949279070 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.949305058 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.951898098 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.952214003 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.952233076 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.952553988 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.952558994 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.978430986 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.978723049 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.978738070 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:27.979058027 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:27.979062080 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.069971085 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.070142031 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.070291042 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.070313931 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.070332050 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.070341110 CEST	61901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.070347071 CEST	443	61901	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.072410107 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.072496891 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.072679996 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.072808027 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.072827101 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.079152107 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.079289913 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.079447985 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.080082893 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.080108881 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.080286980 CEST	61902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.080298901 CEST	443	61902	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.091856003 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.091942072 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.092011929 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.092560053 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.092592001 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.547703028 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.548758030 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.548758030 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.548830032 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.548891068 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.566901922 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.567431927 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.567455053 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.567612886 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.567620039 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.645766020 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.646611929 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.646612883 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.646677017 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.646712065 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.648883104 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.649039984 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.649255991 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.649255991 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.650090933 CEST	61904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.650132895 CEST	443	61904	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.652240992 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.652293921 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.652601004 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.652601004 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.652648926 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.674670935 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.675853968 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.676129103 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.676129103 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.676229000 CEST	61903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.676242113 CEST	443	61903	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.678932905 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.678972006 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.679141998 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.679141998 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.679182053 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.748053074 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.748740911 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.748740911 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.748804092 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.748851061 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.752223015 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.752289057 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.752425909 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.752589941 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.752589941 CEST	61905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.752624035 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.752645016 CEST	443	61905	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.754793882 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.754838943 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.755039930 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.755040884 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.755070925 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.763000011 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.763442993 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.763518095 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.763755083 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.763768911 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.850815058 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.850889921 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.850996017 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.851181030 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.851181030 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.851274967 CEST	61906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.851315975 CEST	443	61906	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.854080915 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.854175091 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.854435921 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.854435921 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.854528904 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.869328976 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.869469881 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.869564056 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.869564056 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.869647026 CEST	61907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.869683981 CEST	443	61907	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.871447086 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.871493101 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:28.871665001 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.871665001 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:28.871705055 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.308372974 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.309396029 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.309396982 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.309432030 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.309462070 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.368369102 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.368844032 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.368856907 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.369167089 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.369184971 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.406497955 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.406795025 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.406816006 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.407174110 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.407181025 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.410149097 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.410213947 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.410315037 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.410321951 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.410396099 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.410439014 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.410439014 CEST	61908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.410480976 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.410510063 CEST	443	61908	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.413014889 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.413039923 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.413104057 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.413207054 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.413214922 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.471472979 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.471667051 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.471772909 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.472404003 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.472423077 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.472444057 CEST	61909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.472450972 CEST	443	61909	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.475087881 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.475125074 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.475344896 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.475344896 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.475379944 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.508852959 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.508915901 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.508961916 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.508970976 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.509016991 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.509023905 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.509033918 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.509061098 CEST	61910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.509068012 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.509083986 CEST	443	61910	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.511049986 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.511126995 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.511197090 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.511301041 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.511318922 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.531044006 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.531507969 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.531517982 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.531858921 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.531863928 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.570209026 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.570553064 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.570576906 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.570955992 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.570964098 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.631702900 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.631741047 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.631800890 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.631805897 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.631901026 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.631959915 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.631959915 CEST	61912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.631973028 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.631983995 CEST	443	61912	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.633932114 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.633999109 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.634067059 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.634180069 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.634202957 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.674206972 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.674360037 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.674530983 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.674530983 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.674530983 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.676172972 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.676206112 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.676424026 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.676424026 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.676460028 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:29.984338045 CEST	61911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:29.984379053 CEST	443	61911	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.080497980 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.081007004 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.081029892 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.081439972 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.081445932 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.131695986 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.132025003 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.132047892 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.132400036 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.132404089 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.185197115 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.185275078 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.185329914 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.185493946 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.185509920 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.185520887 CEST	61913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.185524940 CEST	443	61913	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.188647032 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.188684940 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.188745022 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.188857079 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.188865900 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.196319103 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.196685076 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.196732998 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.197058916 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.197076082 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239279032 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239308119 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239362955 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.239387035 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239463091 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.239463091 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.239478111 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239654064 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239689112 CEST	443	61914	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.239729881 CEST	61914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.241292953 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.241362095 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.241430998 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.241602898 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.241637945 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.300035954 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.300081968 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.300126076 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.300148964 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.300232887 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.300282001 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.300792933 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.300826073 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.300851107 CEST	61915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.300865889 CEST	443	61915	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.304646015 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.304672956 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.304734945 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.304831028 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.304845095 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.332691908 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.333364010 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.333400011 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.334011078 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.334022045 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.369213104 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.369932890 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.369956970 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.371332884 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.371342897 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.437191010 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.437230110 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.437279940 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.437412024 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.437495947 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.437603951 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.437603951 CEST	61916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.437632084 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.437654018 CEST	443	61916	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.441353083 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.441387892 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.441550016 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.441958904 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.441976070 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.485831022 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.486138105 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.486471891 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.506294966 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.506294966 CEST	61917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.506330013 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.506345034 CEST	443	61917	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.515121937 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.515146971 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.519421101 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.520586967 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.520601988 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.858654022 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.859939098 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.859939098 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.859972954 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.859993935 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.910006046 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.912847996 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.912919998 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.913511992 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.913525105 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.963229895 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.963308096 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.963360071 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.963426113 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.963886023 CEST	61918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.963908911 CEST	443	61918	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.968152046 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.968215942 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.968414068 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.968575954 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.968589067 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.976421118 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.977005959 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.977036953 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:30.977402925 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:30.977412939 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.012921095 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.013469934 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.013740063 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.013782024 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.013782024 CEST	61919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.013808012 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.013818026 CEST	443	61919	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.019017935 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.019100904 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.019320965 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.023017883 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.023053885 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.080066919 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.080120087 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.080235958 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.080303907 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.080303907 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.080303907 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.080359936 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.080399990 CEST	61920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.080414057 CEST	443	61920	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.082016945 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.082050085 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.082185984 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.082250118 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.082254887 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.093775988 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.094414949 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.094414949 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.094444036 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.094460011 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.160748959 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.161788940 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.161798954 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.163404942 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.163412094 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.209162951 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.210230112 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.210381031 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.210381031 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.210491896 CEST	61921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.210505009 CEST	443	61921	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.212918997 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.212949038 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.213182926 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.213182926 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.213210106 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.261295080 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.261342049 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.261426926 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.261461973 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.261580944 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.261580944 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.261590004 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.261646032 CEST	61922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.261651993 CEST	443	61922	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.263334990 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.263407946 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.263575077 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.263575077 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.263638973 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.623284101 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.624100924 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.624119043 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.626082897 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.626089096 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.666600943 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.667973042 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.668032885 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.669759989 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.669778109 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.724483967 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.726140022 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.726190090 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.726433039 CEST	61923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.726448059 CEST	443	61923	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.736310959 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.736398935 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.736490011 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.737588882 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.737641096 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.756503105 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.757456064 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.757469893 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.758734941 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.758738995 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.765155077 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.765710115 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.765764952 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.765791893 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.765830994 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.765873909 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.766110897 CEST	61924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.766139984 CEST	443	61924	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.774725914 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.774764061 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.774816990 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.775437117 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.775454998 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.858314991 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.860618114 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.860769033 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.860820055 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.872689962 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.872700930 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.874433994 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.874439955 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.879823923 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.879834890 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.879843950 CEST	61925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.879848957 CEST	443	61925	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.888855934 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.888897896 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.888947964 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.889336109 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.889353991 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.912691116 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.913510084 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.913532972 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.915002108 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.915009022 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.970163107 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.970319033 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.970370054 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.970511913 CEST	61926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.970521927 CEST	443	61926	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.977205992 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.977224112 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:31.977278948 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.977932930 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:31.977946997 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.068594933 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.068630934 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.068682909 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.068716049 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.068742990 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.068789959 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.069036961 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.069071054 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.069096088 CEST	61927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.069111109 CEST	443	61927	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.076006889 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.076092005 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.076169968 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.076548100 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.076582909 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.401834965 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.402945995 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.402961016 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.407016039 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.407022953 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.461855888 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.462404966 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.462435007 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.463010073 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.463016987 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.507931948 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.507996082 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.508167028 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.508480072 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.508480072 CEST	61928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.508491993 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.508502960 CEST	443	61928	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.513458967 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.513495922 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.519102097 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.519382000 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.519408941 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.541472912 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.541831970 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.541856050 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.543023109 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.543029070 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.569708109 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.569941044 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.570049047 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.570049047 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.570049047 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.572990894 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.573050022 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.573276043 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.573276043 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.573338985 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.642775059 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.642831087 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.642929077 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.642966032 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.643035889 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.643057108 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.643086910 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.643114090 CEST	61930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.643121004 CEST	443	61930	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.645539045 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.645622969 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.645808935 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.645891905 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.645910978 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.660903931 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.661803961 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.661803961 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.661827087 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.661838055 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.724560976 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.725440025 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.725440025 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.725486040 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.725509882 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.772335052 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.772486925 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.772599936 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.772599936 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.772620916 CEST	61931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.772629023 CEST	443	61931	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.774996996 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.775022030 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.775230885 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.775230885 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.775250912 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.825753927 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.826009035 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.826056004 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.826090097 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.826154947 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.826154947 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.826155901 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.828078985 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.828119993 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.828301907 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.828301907 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.828337908 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:32.875504971 CEST	61929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:32.875529051 CEST	443	61929	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.141077995 CEST	61932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.141139030 CEST	443	61932	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.262126923 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.268477917 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.268542051 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.271040916 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.271055937 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.347302914 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.347956896 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.348016024 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.348901987 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.348916054 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.370197058 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.370369911 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.370632887 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.370742083 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.370742083 CEST	61934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.370775938 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.370805025 CEST	443	61934	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.377799034 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.377887011 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.381303072 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.385255098 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.385292053 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.443260908 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.444180012 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.444204092 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.445271969 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.445278883 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.452480078 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.452620029 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.452677011 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.452737093 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.452780008 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.452828884 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.452934980 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.452961922 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.452991009 CEST	61935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.453003883 CEST	443	61935	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.457736969 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.457760096 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.457808018 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.458036900 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.458045006 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.538325071 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.538690090 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.538717985 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.539619923 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.539630890 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.543586969 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.544351101 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.544401884 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.544430017 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.544430017 CEST	61936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.544444084 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.544451952 CEST	443	61936	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.551124096 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.551157951 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.551217079 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.551505089 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.551522970 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.645628929 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.645947933 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.646013975 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.646255016 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.646289110 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.646315098 CEST	61937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.646328926 CEST	443	61937	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.653388977 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.653481960 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:33.653553009 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.653949976 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:33.653985977 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.073308945 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.073750019 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.073808908 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.074193954 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.074206114 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.100976944 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.101334095 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.101352930 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.101720095 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.101723909 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.176789999 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.177298069 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.177345037 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.177347898 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.177397013 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.178066015 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.178102016 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.178127050 CEST	61938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.178141117 CEST	443	61938	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.185358047 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.185415030 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.185488939 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.185898066 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.185929060 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.192564011 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.193331957 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.193352938 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.194622993 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.194633007 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.199430943 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.199620008 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.199680090 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.199711084 CEST	61939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.199718952 CEST	443	61939	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.203198910 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.203233004 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.203291893 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.203794003 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.203810930 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.292180061 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.292258978 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.292314053 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.292334080 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.292373896 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.292423010 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.310391903 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.310411930 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.310425997 CEST	61940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.310432911 CEST	443	61940	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.314470053 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.314542055 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:34.314676046 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.314852953 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:34.314882994 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.006577969 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.009438038 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.009888887 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.009903908 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.010642052 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.010701895 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.011065960 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.011074066 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.011142015 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.011154890 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.111248016 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.111485958 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.111561060 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.111661911 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.111700058 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.111726999 CEST	61942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.111742020 CEST	443	61942	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.112693071 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.112852097 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.112963915 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.113164902 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.113179922 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.113189936 CEST	61943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.113194942 CEST	443	61943	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.114761114 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.114850044 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.114940882 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.115124941 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.115160942 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.115730047 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.115751982 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.115861893 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.115966082 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.115992069 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.203808069 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.204272032 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.204303026 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.204629898 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.204638004 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.310509920 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.312180042 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.312279940 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.312331915 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.312437057 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.312513113 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.312539101 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.312555075 CEST	61944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.312562943 CEST	443	61944	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.314883947 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.314930916 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.315006018 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.315128088 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.315161943 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.633625984 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.634128094 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.634160995 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.634617090 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.634634972 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.819163084 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.819667101 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.819734097 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.820135117 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.820147991 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.837042093 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.837357998 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.837372065 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.837719917 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.837724924 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.849478960 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.849792004 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.849817991 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.850183964 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.850188971 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.918193102 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.918339014 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.918400049 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.918517113 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.918553114 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.918576956 CEST	61941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.918591976 CEST	443	61941	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.921124935 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.921163082 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.921264887 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.921360970 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.921371937 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.941397905 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.941596985 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.941664934 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.941696882 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.941716909 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.941730976 CEST	61945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.941736937 CEST	443	61945	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.943603992 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.943633080 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.943732023 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.943866014 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.943883896 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.951365948 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.951437950 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.951513052 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.951519966 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.951560974 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.951621056 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.951628923 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.951639891 CEST	61946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.951643944 CEST	443	61946	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.953704119 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.953742027 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:35.953948021 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.954024076 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:35.954051971 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.001729965 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.002156973 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.002218962 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.002403975 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.002420902 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.320485115 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.320655107 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.320852995 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.320852995 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.320852995 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.323263884 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.323333979 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.323446989 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.323534966 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.323554039 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.569348097 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.569839001 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.569860935 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.570270061 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.570276976 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.625363111 CEST	61947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.625427961 CEST	443	61947	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.626434088 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.626808882 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.626827002 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.627187014 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.627196074 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.647996902 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.648308992 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.648333073 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.648688078 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.648695946 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.668201923 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.668262959 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.668332100 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.668354034 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.668375969 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.668440104 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.668483019 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.668483019 CEST	61949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.668500900 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.668510914 CEST	443	61949	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.671039104 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.671065092 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.671165943 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.671399117 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.671406984 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.727034092 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.727099895 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.727200985 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.727411032 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.727411032 CEST	61950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.727421045 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.727432013 CEST	443	61950	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.730782032 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.730794907 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.730998039 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.730998039 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.731014013 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.751173019 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.751374006 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.751420021 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.751468897 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.751487017 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.751508951 CEST	61951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.751518011 CEST	443	61951	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.753849030 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.753923893 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.754101992 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.754229069 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.754260063 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.981021881 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.981415987 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.981463909 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:36.981930017 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:36.981941938 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.082587004 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.082761049 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.082839966 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.082931042 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.082931042 CEST	61952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.082962990 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.082988977 CEST	443	61952	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.085498095 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.085566044 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.085697889 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.085853100 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.085890055 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.341274023 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.341664076 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.341702938 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.342061996 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.342073917 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.432635069 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.433689117 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.433689117 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.433706999 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.433711052 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.440454006 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.440772057 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.440946102 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.440947056 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.440947056 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.443478107 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.443520069 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.443658113 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.443795919 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.443814039 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.548268080 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.548578978 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.548664093 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.548664093 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.548685074 CEST	61954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.548697948 CEST	443	61954	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.551412106 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.551426888 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.551594973 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.551594973 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.551620960 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.587331057 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.587676048 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.587692976 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.588047981 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.588052034 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.704607010 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.704627991 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.704660892 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.704726934 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.704829931 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.704946041 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.704946041 CEST	61953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.704958916 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.704968929 CEST	443	61953	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.706670046 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.706720114 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.706943035 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.706943035 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.706985950 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.750488997 CEST	61955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.750557899 CEST	443	61955	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.787652969 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.788543940 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.788543940 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.788606882 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.788651943 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.895750046 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.895903111 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.896030903 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.896030903 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.896141052 CEST	61956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.896173000 CEST	443	61956	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.898406029 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.898489952 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:37.898627996 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.898734093 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:37.898762941 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.090672970 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.091412067 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.091440916 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.091465950 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.091471910 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.196412086 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.196649075 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.196850061 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.196933985 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.196933985 CEST	61957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.196954012 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.197025061 CEST	443	61957	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.199446917 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.199544907 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.199870110 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.199870110 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.199959993 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.235104084 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.238791943 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.238791943 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.238804102 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.238822937 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.381515026 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.382982969 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.383049965 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.387064934 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.387079954 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.392064095 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.392222881 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.392432928 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.393548012 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.393548012 CEST	61958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.393568993 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.393585920 CEST	443	61958	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.397732019 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.397825003 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.398087978 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.398087978 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.398176908 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.488249063 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.488452911 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.488523960 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.488606930 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.488639116 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.488675117 CEST	61959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.488689899 CEST	443	61959	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.492609024 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.492698908 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.492953062 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.493078947 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.493109941 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.612288952 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.613286018 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.613349915 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.614231110 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.614245892 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.718151093 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.718791962 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.718909979 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.720120907 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.720122099 CEST	61960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.720189095 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.720223904 CEST	443	61960	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.725482941 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.725512028 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.725727081 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.725763083 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.725771904 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.882524967 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.883729935 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.883793116 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.885080099 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.885093927 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.991863012 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.992424011 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.992516994 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.992588043 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.992588043 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.992741108 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.992777109 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.992789030 CEST	61961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.992795944 CEST	443	61961	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.999196053 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.999226093 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:38.999295950 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.999596119 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:38.999610901 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.074580908 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.075277090 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.075294971 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.075695992 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.075702906 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.173480034 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.174134016 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.174196005 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.174417019 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.174432039 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.176295042 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.176441908 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.176666975 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.176666975 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.176666975 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.179373980 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.179409981 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.179469109 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.179595947 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.179610968 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.278589010 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.278659105 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.278769970 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.278840065 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.278840065 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.278841019 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.278933048 CEST	61963	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.278970003 CEST	443	61963	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.281522036 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.281609058 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.281709909 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.281919003 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.281935930 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.385948896 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.386029005 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.386086941 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.386220932 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.386220932 CEST	61933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.386261940 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.386288881 CEST	443	61933	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.388705969 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.388736963 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.388803959 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.388953924 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.388972044 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.409498930 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.409992933 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.410024881 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.413103104 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.413110018 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.484512091 CEST	61962	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.484589100 CEST	443	61962	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.515686035 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.515832901 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.516067982 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.516340971 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.516340971 CEST	61964	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.516360998 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.516397953 CEST	443	61964	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.521194935 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.521285057 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.527303934 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.530092955 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.530128956 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.664189100 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.664952993 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.664977074 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.671077967 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.671088934 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.767661095 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.767723083 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.767826080 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.770143032 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.770143032 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.770205021 CEST	61965	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.770220041 CEST	443	61965	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.779083967 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.779133081 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.782958031 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.801181078 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.801214933 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.843379974 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.844228029 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.844275951 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.845103025 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.845108986 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.946624041 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.946691990 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.947127104 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.947127104 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.947181940 CEST	61966	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.947194099 CEST	443	61966	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.953336954 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.953361988 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.954174042 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.954410076 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.954461098 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.954473019 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.955210924 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.955210924 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:39.955254078 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:39.955266953 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.042016029 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.043062925 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.043080091 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.043957949 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.043962955 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.072755098 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.072911024 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.073113918 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.073311090 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.073343992 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.073378086 CEST	61967	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.073393106 CEST	443	61967	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.079085112 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.079130888 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.079209089 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.081132889 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.081157923 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.159610033 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.160083055 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.160964012 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.161473989 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.161482096 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.161523104 CEST	61968	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.161526918 CEST	443	61968	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.171991110 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.172092915 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.173482895 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.173878908 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.173914909 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.188211918 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.189816952 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.189843893 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.190696001 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.190707922 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.287925959 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.287991047 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.288091898 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.288130999 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.288218021 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.288218975 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.288258076 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.288290977 CEST	61969	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.288309097 CEST	443	61969	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.290309906 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.290354013 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.290481091 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.290591955 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.290617943 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.605521917 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.606075048 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.606143951 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.606615067 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.606638908 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.704830885 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.704967022 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.705048084 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.705689907 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.705689907 CEST	61970	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.705737114 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.705765009 CEST	443	61970	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.713972092 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.714009047 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.714081049 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.715013027 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.715029001 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.794275999 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.795814991 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.795839071 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.796665907 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.796672106 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.799647093 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.801454067 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.801486015 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.802154064 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.802162886 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.824040890 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.836545944 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.836591959 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.837838888 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.837850094 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.900685072 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.900746107 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.900803089 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.900835991 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.900882006 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.900935888 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.901124001 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.901217937 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.901271105 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.902081966 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.902096987 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.902113914 CEST	61972	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.902121067 CEST	443	61972	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.904963970 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.904989004 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.905004025 CEST	61971	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.905010939 CEST	443	61971	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.914222002 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.914259911 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.914316893 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.918716908 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.918798923 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.918884039 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.919287920 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.919301987 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.921060085 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.921082973 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.934938908 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.936052084 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.936211109 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.936269999 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.936446905 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.936464071 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.937763929 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.937776089 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.938734055 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.938762903 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.938788891 CEST	61973	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.938805103 CEST	443	61973	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.950759888 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.950793028 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:40.950855017 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.951153994 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:40.951168060 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.076422930 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.076456070 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.076522112 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.076519012 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.076571941 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.076916933 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.077018976 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.077048063 CEST	61974	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.077063084 CEST	443	61974	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.082283974 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.082310915 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.082361937 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.082706928 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.082719088 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.384401083 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.385634899 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.385653973 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.386953115 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.386960030 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.482928991 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.483213902 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.483547926 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.483582973 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.484019995 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.484127045 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.484127045 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.484311104 CEST	61975	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.484329939 CEST	443	61975	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.490710974 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.490793943 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.495187044 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.495445967 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.495479107 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.566917896 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.567869902 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.567871094 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.567907095 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.567919970 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.617085934 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.617764950 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.617764950 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.617779970 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.617799044 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.667335033 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.667412043 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.667557001 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.667593002 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.667646885 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.667646885 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.667824984 CEST	61977	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.667845011 CEST	443	61977	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.670074940 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.670173883 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.670324087 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.670401096 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.670420885 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.723407030 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.723440886 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.723599911 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.723599911 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.723649979 CEST	61978	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.723671913 CEST	443	61978	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.725672960 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.725723982 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.725847960 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.725920916 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.725933075 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.793992043 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.794323921 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.794349909 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.794681072 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.794686079 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.899307013 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.899396896 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.899568081 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.899568081 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.899755955 CEST	61979	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.899771929 CEST	443	61979	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.901901960 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.901992083 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:41.902146101 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.902235031 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:41.902256012 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.082535982 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.121768951 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.121768951 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.121834993 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.121889114 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.242825031 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.243206024 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.243957043 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.243957996 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.243957996 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.246733904 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.246807098 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.247026920 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.247026920 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.247102976 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.323221922 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.350097895 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.350131035 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.350564003 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.350591898 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.363573074 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.364489079 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.364521027 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.365111113 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.365119934 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.448631048 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.448945999 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.449014902 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.449060917 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.449060917 CEST	61981	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.449083090 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.449098110 CEST	443	61981	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.452871084 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.452896118 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.452960968 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.453494072 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.453509092 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.469991922 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.470014095 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.470046043 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.470067024 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.470136881 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.470263004 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.470271111 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.470288038 CEST	61982	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.470293999 CEST	443	61982	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.472475052 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.472484112 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.472541094 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.472835064 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.472846985 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.547152996 CEST	61980	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.547200918 CEST	443	61980	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.558552980 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.603596926 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.603661060 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.604003906 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.604018927 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.701929092 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.701958895 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.701970100 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.702029943 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.702157974 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.702157974 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.702158928 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.702363968 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.702363968 CEST	61983	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.702409029 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.702438116 CEST	443	61983	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.705934048 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.705984116 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:42.706049919 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.706214905 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:42.706248999 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.091687918 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.092350006 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.092415094 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.092658997 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.092675924 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.198257923 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.198321104 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.198367119 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.198508024 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.198508978 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.198575974 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.198642015 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.279666901 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280138969 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.280153036 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280245066 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280553102 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.280556917 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280584097 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280687094 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.280755043 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280795097 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.280795097 CEST	61984	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.280817032 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280857086 CEST	443	61984	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.280996084 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.281084061 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.281598091 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.281614065 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.283484936 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.283518076 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.283582926 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.283674955 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.283689022 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.290611982 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.291062117 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.291153908 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.291450977 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.291507006 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.350811958 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.351247072 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.351309061 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.351530075 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.351545095 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.380883932 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.380939007 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.380949020 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.380990982 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381033897 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381043911 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381047010 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381072044 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381113052 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381120920 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381135941 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381155014 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381169081 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381169081 CEST	61976	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381175041 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381181002 CEST	443	61976	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381330967 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381330967 CEST	61985	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.381376982 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.381405115 CEST	443	61985	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.383439064 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.383486986 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.383541107 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.383541107 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.383553982 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.383598089 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.383661032 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.383668900 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.383806944 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.383816957 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.397690058 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.397818089 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.397866964 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.397974968 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.397975922 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.397975922 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.398015022 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.398073912 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.451210976 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.451262951 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.451366901 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.451381922 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.451458931 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.451510906 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.451510906 CEST	61987	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.451555014 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.451585054 CEST	443	61987	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.453711987 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.453732014 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.453810930 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.453919888 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.453932047 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.490641117 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.490704060 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.490838051 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.490839005 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.490839005 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.490911961 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.490957022 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.490957022 CEST	61986	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.490998983 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.491030931 CEST	443	61986	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.493035078 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.493067980 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.493132114 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.493258953 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.493271112 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.963232040 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.963875055 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.963891029 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:43.964301109 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:43.964307070 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.037697077 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.038114071 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.038353920 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.038505077 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.038511992 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.045413971 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.045876980 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.045893908 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.046268940 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.046279907 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.068847895 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.068871975 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.068926096 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.069103956 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.069155931 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.069155931 CEST	61988	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.069175005 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.069179058 CEST	443	61988	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.071928024 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.072016954 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.072139025 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.072274923 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.072313070 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.130927086 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.131302118 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.131320953 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.131603003 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.131618023 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.137805939 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.138109922 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.138123989 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.138463974 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.138468981 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.157865047 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.157934904 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.158094883 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.158144951 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.158169031 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.158185959 CEST	61989	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.158194065 CEST	443	61989	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.160437107 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.160470963 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.160532951 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.160635948 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.160654068 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.436737061 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.436892033 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.436913967 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.436964035 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.437071085 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437086105 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437089920 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.437114954 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437150002 CEST	61992	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.437149048 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.437156916 CEST	443	61992	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437277079 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.437277079 CEST	61991	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.437290907 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437292099 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437302113 CEST	443	61991	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.437340975 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.438555956 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.438580990 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.438589096 CEST	61990	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.438596964 CEST	443	61990	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.440627098 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.440665007 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.441122055 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441157103 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.441183090 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441210985 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441334009 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441351891 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.441502094 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441502094 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441514969 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.441538095 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.441570997 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441668034 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.441679955 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.741801977 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.742280960 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.742336988 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.742693901 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.742707014 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.809462070 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.809832096 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.809878111 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:44.810230017 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:44.810241938 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087112904 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087209940 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087271929 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.087307930 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087351084 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087440968 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.087486982 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.087517977 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087542057 CEST	61993	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.087557077 CEST	443	61993	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087821007 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.087975979 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.088036060 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.088082075 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.088099003 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.088120937 CEST	61994	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.088131905 CEST	443	61994	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.280909061 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.281136990 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.281332970 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.281366110 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.281652927 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.281683922 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.281783104 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.281795979 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.281932116 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.282053947 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.282061100 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.282260895 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.282274008 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.282567024 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.282576084 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384387970 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384548903 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384649038 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384694099 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384793997 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384812117 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.384854078 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.384860992 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.384881020 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384896994 CEST	61996	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.384902954 CEST	443	61996	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.384905100 CEST	61998	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.384933949 CEST	443	61998	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.386192083 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.386265039 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.386296988 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.386316061 CEST	443	61997	13.107.246.45	192.168.2.4
Oct 8, 2024 19:06:45.386338949 CEST	61997	443	192.168.2.4	13.107.246.45
Oct 8, 2024 19:06:45.386352062 CEST	443	61997	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 19:05:06.567715883 CEST	56312	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:05:06.567914963 CEST	58465	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:05:06.571876049 CEST	53	59173	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:06.580039978 CEST	53	51352	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:06.580300093 CEST	53	56312	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:06.584770918 CEST	53	58465	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:07.871475935 CEST	55359	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:05:07.871820927 CEST	62757	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:05:08.135576010 CEST	53	51386	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:08.141717911 CEST	53	62757	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:08.144874096 CEST	53	55359	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:10.415159941 CEST	57647	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:05:10.415538073 CEST	62658	53	192.168.2.4	1.1.1.1
Oct 8, 2024 19:05:10.422947884 CEST	53	57647	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:10.422961950 CEST	53	62658	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:18.793999910 CEST	53	56592	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:19.711246014 CEST	138	138	192.168.2.4	192.168.2.255
Oct 8, 2024 19:05:24.810295105 CEST	53	59226	1.1.1.1	192.168.2.4
Oct 8, 2024 19:05:43.831573009 CEST	53	52956	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:05.842642069 CEST	53	49977	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:06.184225082 CEST	53	61224	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:07.914144993 CEST	53	60877	1.1.1.1	192.168.2.4
Oct 8, 2024 19:06:37.040657997 CEST	53	52589	1.1.1.1	192.168.2.4
Oct 8, 2024 19:07:22.572115898 CEST	53	65428	1.1.1.1	192.168.2.4
Oct 8, 2024 19:07:43.484292984 CEST	53	63362	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 19:05:06.567715883 CEST	192.168.2.4	1.1.1.1	0x2d60	Standard query (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:06.567914963 CEST	192.168.2.4	1.1.1.1	0x2fd0	Standard query (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev	65	IN (0x0001)	false
Oct 8, 2024 19:05:07.871475935 CEST	192.168.2.4	1.1.1.1	0x6ec	Standard query (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:07.871820927 CEST	192.168.2.4	1.1.1.1	0xa117	Standard query (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev	65	IN (0x0001)	false
Oct 8, 2024 19:05:10.415159941 CEST	192.168.2.4	1.1.1.1	0x25fd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:10.415538073 CEST	192.168.2.4	1.1.1.1	0xfa71	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 19:05:06.580300093 CEST	1.1.1.1	192.168.2.4	0x2d60	No error (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:06.580300093 CEST	1.1.1.1	192.168.2.4	0x2d60	No error (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:08.144874096 CEST	1.1.1.1	192.168.2.4	0x6ec	No error (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:08.144874096 CEST	1.1.1.1	192.168.2.4	0x6ec	No error (0)	pub-037acb244bd3438fb27f796720edbd4c.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:10.422947884 CEST	1.1.1.1	192.168.2.4	0x25fd	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 8, 2024 19:05:10.422961950 CEST	1.1.1.1	192.168.2.4	0xfa71	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 19:05:56.775592089 CEST	1.1.1.1	192.168.2.4	0x3e90	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 19:05:56.775592089 CEST	1.1.1.1	192.168.2.4	0x3e90	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-037acb244bd3438fb27f796720edbd4c.r2.dev

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	172.66.0.235	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:07 UTC	596	OUT	GET /photo_2024-09-26_08-29-50.jpg HTTP/1.1 Host: pub-037acb244bd3438fb27f796720edbd4c.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 17:05:07 UTC	284	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:07 GMT Content-Type: image/jpeg Content-Length: 31221 Connection: close Accept-Ranges: bytes ETag: "2d6563a2316355a57308635ba957c5ec" Last-Modified: Fri, 27 Sep 2024 03:23:46 GMT Server: cloudflare CF-RAY: 8cf7b6c3dafc7c94-EWR
2024-10-08 17:05:07 UTC	1085	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c2 00 11 08 03 e0 02 fd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 01 03 06 02 07 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fb f8 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF,,CC"
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: 5f 46 e2 08 b7 f5 d7 87 9a ab fa c3 8e ef 79 0e e0 f1 55 7d 56 73 5d 3d 2f 48 72 bd 87 39 d6 1c 1f 49 51 d0 9c b6 ab 2d 44 c9 da e7 9c 2f d6 fe 65 f5 23 e8 40 00 06 9d da 4e 6e 83 a2 85 2d 3f bb 9f 36 4b b8 ab b0 b3 63 5a 58 5c 47 79 4c 52 6b be f0 56 6e b5 f6 5b 48 d1 ec d8 d6 36 35 8d 9a 7d 69 3d db 54 db 0c e3 20 00 00 00 00 01 80 00 00 f0 7b 79 c9 96 bf 47 a0 00 00 00 00 f3 e8 42 d3 66 2b 3d d8 08 3e 2c 45 56 f9 c2 0f 9b 01 59 b2 78 ad dd 30 56 ec 9c 2b 71 66 2b fd 4e c1 5b 2a 40 cb 03 20 01 a3 7e 93 9c a4 e8 f6 1c 4f ae bb 51 a7 a1 ad 92 92 51 8b 9a 7b 6d 07 2d 6d 26 51 26 44 4f 44 94 61 25 18 49 46 12 74 f8 d6 6d b5 ac b3 19 c6 40 00 00 00 00 03 00 00 0f 1c 3f 6f c6 98 b9 a9 b7 28 fa 08 d3 cb 30 00 00 00 00 00 00 00 62 21 31 ab 68 00 00 01 17 91 ea Data Ascii: _FyU}Vs]=/Hr9IQ-D/e#@Nn-?6KcZX\GyLRkVn[H65}i=T {yGBf+=>,EVYx0V+qf+N[*@ ~OQQ{m-m&Q&DODa%IFtm@?o(0b!1h
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: f8 21 5d 57 da a4 f4 cd 64 74 9d eb 5f 17 a1 84 66 6c 39 83 38 c8 00 00 00 00 00 62 b6 ca a0 73 92 7c 11 77 78 f5 2c aa d9 9e 53 46 ec 6c aa 9d 93 46 9c 4a c1 07 c5 86 08 72 36 09 d4 56 b1 c8 d2 76 e4 75 3c a4 82 f2 cf 8a 98 75 2e 58 75 2e 5c 75 18 e6 07 50 e5 c7 50 e5 fc 9d 53 95 f4 75 0e 5f c9 d5 39 61 d4 b9 61 d4 d5 55 42 3a 6e 52 7e a2 1e 27 0f 50 26 79 2b 73 67 e4 f1 d9 72 9b 4e ad cb 0e a5 cb 0e a5 ca e4 ea 5c b0 ea 5c b6 4b f8 34 fa 0c ea 95 e0 f3 8d e3 de dd 19 36 5d 50 7b 3a b8 54 7a 8e 8e 64 29 a3 38 c8 00 00 00 00 00 63 9c e8 f9 c3 9a ce 8a f2 44 ea ed e4 95 1e c2 e5 53 ec b3 d3 e2 71 13 7e 2a 4b 68 7a 67 1b 93 72 41 4e d4 44 c5 57 92 df 34 fa 4b ec 53 6c 2d bd 51 dc 9e d3 84 14 e1 05 38 41 d5 67 1c ae 95 ae 19 61 12 05 a1 eb d6 ba 82 ef dd 05 Data Ascii: !]Wdt_fl98bs\|wx,SFlFJr6Vvu<u.Xu.\uPPSu_9aaUB:nR~'P&y+sgrN\\K46]P{:Tzd)8cDSq~*KhzgrANDW4KSl-Q8Aga
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 Data Ascii: 8`8`8`8`8`8`8`
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: c4 00 30 10 00 02 02 01 04 00 05 04 02 02 01 05 01 00 00 00 01 02 00 03 04 11 12 13 14 05 21 22 31 32 10 15 20 40 30 50 23 33 60 06 24 41 43 a0 c0 ff da 00 08 01 01 00 01 05 02 ff 00 e0 a0 b8 10 30 30 b6 90 38 30 b6 93 78 8d 70 59 d9 13 b0 27 3c e7 8a 75 fa 1b b4 26 f1 39 c4 ec 08 6f 02 76 04 ec 09 ce 27 60 4e c0 83 20 18 0e bf 9b de 12 0c a5 69 da 5d cd 90 04 6c e5 52 32 94 c7 cc 55 83 31 48 5c e5 62 ad b8 7f 2b dc 12 76 56 76 56 76 96 76 16 76 56 76 16 76 04 e7 06 35 ea b3 b4 b3 b2 b3 b2 b3 b0 b3 b0 b3 b2 b1 6f 0d 39 46 bf ae de 43 2f 3b 6d 98 b9 84 9c 9c ff 00 3a f2 9d 4e 4e 79 11 73 c8 96 5c 4a 36 63 6e c3 ca 2f 65 8e 88 98 d6 8b cd 5e c7 da ff 00 91 d4 cf 31 04 7f 65 d4 c1 4b c3 4b c5 a1 a3 d0 f2 aa 18 14 1a 0f cb c5 b2 19 0a f8 9d 95 b2 66 3b 46 f1 Data Ascii: 0!"12 @0P#3`$AC0080xpY'<u&9ov'`N i]lR2U1H\b+vVvVvvvVvv5o9FC/;m:NNys\J6cn/e^1eKKf;F
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: 14 ea 3f aa 31 f1 d5 e0 c2 ac 43 87 59 83 15 00 18 c8 23 62 56 d0 60 d4 09 c6 43 06 32 08 f8 a8 f3 a7 5c 18 c8 00 c3 ac 16 c7 46 03 0e b1 3a c9 3a 95 c5 c3 ad 63 62 a3 45 c6 45 87 0a b3 2b a8 57 fc 16 7c 5e ad d0 e2 bc 14 58 0d 95 bc f0 fa 8e 9c 02 70 09 c0 25 d4 7a 16 a2 03 86 6b 78 0e da a9 f4 f0 89 c1 38 04 e0 13 80 4e 01 38 04 e0 12 ca 46 dc 61 a0 fd 8d c2 6b 35 9b 84 d7 fa 5d 7f 3b 3e 20 e8 db 84 20 19 c6 25 67 8e 76 0c ec 19 d8 30 df a8 dd 36 0d db bc 85 da 4e c1 9d 83 3b 06 76 0c ec 19 d8 33 b0 67 60 c7 b8 91 8c 3c bf 5d 8e 83 33 c4 1a ab 28 f1 12 d1 72 37 a5 99 8e ad 87 79 b1 7f a0 b9 f6 23 78 a6 d6 6f 16 32 bc c2 d5 fd c0 ee c7 b7 90 7e 46 90 67 08 9c 02 70 09 c2 27 00 9c 0b 38 16 70 09 c2 27 00 9c 22 70 09 c0 b3 81 67 02 ce 05 9c 0b 38 16 70 2c Data Ascii: ?1CY#bV`C2\F::cbEE+W\|^Xp%zkx8N8Fak5];> %gv06N;v3g`<]3(r7y#xo2~Fgp'8p'"pg8p,
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: be 2b be 9c 8e 61 67 d3 99 f5 c4 b4 9f e1 bb e3 40 99 43 44 76 6d db 8e 8a ed 37 19 85 e7 34 fa e4 7b 51 f1 fd 2c b3 a0 ec fa 77 a4 e4 43 39 14 43 72 18 2d 48 b7 2e 86 f4 d5 2d 51 06 70 9f 70 11 73 b5 9f 70 10 f8 80 13 ee 42 7d c4 44 cd dc 79 e7 3c e7 9c f2 cb fd 35 e4 ed 8f 96 a4 f3 a3 4e 45 9c 89 16 c5 9d b5 d4 e5 ac 6c 84 32 bd ad 16 dd b3 9e 73 ce 79 cf 39 e7 3c e7 9c f3 9e 73 cb 6f f5 be 60 2b c8 90 d9 5c 4c 95 8d 92 ac 15 d5 41 bd 0c e6 48 2e 5d 55 83 81 58 89 e8 3c f3 9e 73 ce 79 cf 39 e7 3c e7 97 5f e9 af 2b 64 6c c0 e3 72 31 2c a2 72 24 de a6 52 fb 47 3c e7 9c f2 eb b5 98 ff 00 1f d2 ca f3 0f 8e 48 6c 66 89 88 d1 b1 1a 1c 3b 22 e2 3e 89 86 db 4e 1b 86 14 30 5e b3 ce a3 ca 31 5a 3e 23 ee 7c 4b 0c 38 76 44 c4 79 89 88 43 70 09 c0 27 00 9c 02 59 40 Data Ascii: +ag@CDvm74{Q,wC9Cr-H.-QppspB}Dy<5NEl2sy9<so`+\LAH.]UX<sy9<_+dlr1,r$RG<Hlf;">N0^1Z>#\|K8vDyCp'Y@
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: 2b 57 91 4d 26 d1 34 13 68 9b 44 da 26 d1 38 e7 1e 8d 8b fe bf d2 f1 0f 63 76 d8 f9 84 4c 6b 37 b6 45 a5 48 c9 6d 4e 43 45 c9 33 9c 99 53 92 d6 fb 29 d1 2d c9 2a 68 c8 2e 57 e5 f5 73 a0 b7 20 a9 ec 36 83 21 8c ec b6 a2 f6 69 cc c2 76 58 4c 7b 37 8f ce df 8d 7e 42 cb c8 89 94 c5 98 eb 1d f6 ab 64 34 19 2d 31 ee 2f 32 7e 22 e6 87 20 89 d8 3b 79 d8 c4 b0 98 ee 50 f6 9a 26 43 12 f9 06 2d ad 03 16 3a e8 8d 92 c1 eb b8 92 7e 14 fb cb ed 20 8c 96 9d 83 a6 35 85 be 96 fc 97 db 2a c2 b3 99 a3 58 da 73 b4 ec b4 19 0d 1a f6 13 16 d2 f1 bd f1 7f d7 fa 5e 21 ec 69 dd 1f 0b 59 45 7b 19 e9 0f 3a 82 75 27 52 0c 5d 22 55 b6 5b ed 58 d5 5f 14 34 4c 60 90 7c be a4 6a 1b 17 71 ea 09 d4 9d 41 17 18 08 d8 c0 ce a4 ae ad 9f c1 6f c6 a1 a8 6c 6d 48 c4 00 d8 34 86 bd ca 31 44 38 Data Ascii: +WM&4hD&8cvLk7EHmNCE3S)-h.Ws 6!ivXL{7~Bd4-1/2~" ;yP&C-:~ 5Xs^!iYE{:u'R]"U[X_4L`\|jqAolmH41D8
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: 1c eb 0d a7 0c 45 a3 8e 6e 69 a6 e5 7c 2d 4a 53 b2 6e 69 a6 f5 7c 10 4a 61 e9 1b 13 59 d0 f3 18 9a 41 aa 85 27 51 ff 00 02 ba dd 93 b0 27 62 76 67 62 76 27 66 76 67 6a 0c 92 67 29 9c c6 72 99 cc 67 29 9c a6 1b 4c 36 ed 8b 71 9c a6 1b 67 38 9d 9d 27 39 33 94 ce 63 06 41 d7 94 ce 49 c9 39 5a 72 b4 e6 69 ca d0 e4 11 05 e4 ce 62 27 66 76 a7 66 76 a0 c9 d6 72 b4 ec 92 79 c8 9d 99 da 9d a9 d9 9d 98 32 75 87 20 88 2f 26 1b c8 9d a9 da 9d a9 da 83 20 99 ca d3 b2 75 e5 69 d9 d2 76 a7 6a 76 a7 6a 73 18 d9 04 41 71 33 98 ce cc ec ce cc ed 41 79 33 99 a5 36 ee fd 3c df 8b 58 d0 33 68 8c d0 bb 09 ca d0 58 c4 97 69 43 16 34 26 ac ca ab 35 49 aa 4d 52 7a 21 29 17 61 97 d6 25 55 0d bc 42 64 26 d5 36 36 a1 db 5c 65 dc 38 84 6a 86 89 58 e4 28 a2 7a 27 a2 6a 93 d3 3d 10 05 Data Ascii: Eni\|-JSni\|JaYA'Q'bvgbv'fvgjg)rg)L6qg8'93cAI9Zrib'fvfvry2u /& uivjvjsAq3Ay36<X3hXiC4&5IMRz!)a%UBd&66\e8jX(z'j=
2024-10-08 17:05:07 UTC	1369	IN	Data Raw: db 1b 10 87 d4 d4 8b a4 d5 f2 d2 2a 69 45 3e 4b a7 23 e9 d2 4a 29 f5 13 7b c8 7d 48 61 0c 21 83 08 61 08 63 a3 a1 d3 49 f5 3e a7 d4 fa 9f 53 07 c9 b9 0a 28 ea 7c b4 12 aa 68 73 02 a0 e2 0f ac 6d 37 c9 16 40 8f b1 28 60 c1 08 3a a1 83 06 0c 6f c1 06 54 97 3b 3b 15 dc 5c 99 53 4b b8 9e 82 4c 53 02 29 02 d7 e2 84 df 15 9f 45 23 41 84 3a 3a 30 87 44 31 28 83 a3 0d eb b1 e9 d4 51 6c 81 c9 20 6f cb 28 af 77 c4 82 47 ba 3f 22 a4 13 59 a2 10 35 d3 ec fc 94 c9 91 dc c9 91 9c c9 0a 4a 99 1d c6 71 d5 48 51 dc c9 0a 4a 8e 8a 33 9e 3b 0a 2b d9 14 7a 4d cf ed 23 f8 25 4c d6 14 d3 26 9a 69 65 32 3b 8b 3d 8e 8a 2c 8a 6a 91 5d 7b 11 94 d4 ea 6a 65 ec 9d 85 14 56 26 93 64 7b af 14 e8 fa a9 85 19 ba 30 a4 22 9a 55 74 a8 90 a4 a0 8c 8a 22 7c 54 66 51 57 e2 b9 19 10 5f 15 16 Data Ascii: *iE>K#J){}Ha!acI>S(\|hsm7@(`:oT;;\SKLS)E#A::0D1(Ql o(wG?"Y5JqHQJ3;+zM#%L&ie2;=,j]{jeV&d{0"Ut"\|TfQW_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	162.159.140.237	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:08 UTC	396	OUT	GET /photo_2024-09-26_08-29-50.jpg HTTP/1.1 Host: pub-037acb244bd3438fb27f796720edbd4c.r2.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 17:05:08 UTC	284	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:08 GMT Content-Type: image/jpeg Content-Length: 31221 Connection: close Accept-Ranges: bytes ETag: "2d6563a2316355a57308635ba957c5ec" Last-Modified: Fri, 27 Sep 2024 03:23:46 GMT Server: cloudflare CF-RAY: 8cf7b6cd5bc44225-EWR
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c2 00 11 08 03 e0 02 fd 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 01 03 06 02 07 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fb f8 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF,,CC"
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: 7a dc 47 4c 10 d3 04 34 c1 0d 30 43 4c 1a f6 03 38 c8 00 00 00 00 00 60 00 01 aa 9e ea 3c 53 41 97 0c d9 36 04 9a e9 bd 40 f6 4c 44 12 d0 fc 13 d0 f2 4b 43 13 11 3c 13 90 c4 c4 49 46 40 06 2b 6c f5 91 27 e8 de 00 00 00 56 c7 b2 8f 1a b1 49 10 eb bc 50 68 ae 93 cd 2e a2 f3 d7 35 e0 ea f4 d1 c7 3a 19 1c fe e2 d3 6f 33 68 74 be bc 7b 00 63 22 ab 6c cd 64 80 00 00 00 00 ce 32 00 00 00 00 00 18 00 00 3c 7b f3 1c b5 75 ad 51 b6 44 3b 1a aa 91 98 c7 ad 7b 6f 8e 7b d7 66 38 9f 1d c0 e2 a4 f5 83 95 85 dc 79 39 17 63 83 96 eb f4 c9 32 00 00 00 00 00 01 02 7c 48 e2 fc da 69 36 46 9f 0e bc e2 4e 48 5a ae b4 a6 af 33 e3 4b 88 76 7e 69 65 59 b8 e8 f3 a7 70 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 f3 eb cc 73 f1 b6 e9 56 c8 fa 2c 93 af cc 72 45 df 31 66 74 9e Data Ascii: zGL40CL8`<SA6@LDKC<IF@+l'VIPh.5:o3ht{c"ld2<{uQD;{o{f8y9c2\|Hi6FNHZ3Kv~ieYp8`sV,rE1ft
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: e4 ad 97 89 c4 0c 40 82 5f 66 9e c0 93 0a ee b8 ca 65 49 27 14 d8 2e b3 cf f9 3a 2c 50 8e 85 16 d0 eb 6c 20 4f 19 c6 40 00 00 00 00 03 1c ef 45 cf 1c 8c 3b ac 95 36 70 e7 10 f5 d8 64 af f5 38 78 7b d0 67 46 e9 24 0f 52 e0 96 b9 8e 24 78 d2 20 e2 c0 57 ac 04 6c 4a 15 f3 7d 7a 37 b4 0d ed 03 7b 40 df 1f 3a 4d 7a f3 2c 81 ba 5c 43 de 89 9b 0a d9 32 70 47 8d 23 61 17 d4 e1 03 7e ff 00 25 6f bd 93 88 7a e7 88 da a7 43 25 d7 cf f6 42 9a d4 6b 9d 5b 30 d3 1a c0 56 ca df 83 7d 7c 98 45 8c 5d be 88 1b 26 0a df 36 82 b3 36 38 35 48 f1 e4 ec e7 c1 9c 33 8c 80 00 00 00 00 06 23 c8 1c e4 c9 fb 4e 6f 9c ef ab 8e 77 3d 17 92 87 6d ef a3 9a dd 79 e8 f7 ee cb 25 67 9b 51 c8 45 ea 21 1c d6 8e 97 49 5b 13 a5 d6 73 d2 ee 3d 9c ce 7a 0d 65 6f 51 1a e1 21 25 fb 58 2b 31 58 b3 Data Ascii: @_feI'.:,Pl O@E;6pd8x{gF$R$x WlJ}z7{@:Mz,\C2pG#a~%ozC%Bk[0V}\|E]&6685H3#Now=my%gQE!I[s=zeoQ!%X+1X
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 60 06 21 93 1c c7 a3 a5 c7 35 0c ec 9c 94 a3 a3 72 fa 4e b9 c9 6f 3a 5c f2 93 0b f7 23 64 5e bc ea 37 39 5b 02 ed e7 51 b5 c7 6e 3a c7 35 0c ec 5c bf 42 48 63 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 38 c8 00 00 00 00 00 63 cf a8 26 bd 31 f0 6c d3 b7 d1 a3 c4 ac 11 e4 30 69 Data Ascii: `8`8`8`8`!5rNo:\#d^79[Qn:5\BHc 8c&1l0i
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: dc b1 32 ae 31 af bb 5e cd ba 76 ad 2c f9 57 29 a2 eb 1e 23 59 cb e2 36 5a b2 bc 8b 75 b3 22 d1 16 db 98 bd d6 00 32 ee d4 e5 5b 3c 3e e7 60 b9 16 9c ca be 1f ac df 1f 12 d3 97 1b 2b 6b f6 3f ee 79 28 db e2 57 69 65 0a f6 96 4d 28 b7 d2 ed 7f 04 b3 c4 ed b4 78 0a 9e 24 fa 64 8f 3a 87 9d a3 cf cf 40 09 14 2e 8f aa 81 bd 26 f5 85 d2 07 5f e0 f1 4c 56 b4 bf 84 b3 2d 1e 1c e2 8c 2f 0d 7d 5e ab 29 73 e1 ef 61 e9 d9 41 b6 9b 6d af 03 1d ea b7 1f fd 7f cb 97 42 3b 3e 0d 5a 75 a9 89 8d 53 4b 70 eb 10 62 d5 af 4e a6 0b 55 4a 54 d4 0b a5 57 1f b6 ae a7 c3 54 ca f0 51 63 78 7a 96 fb 62 4f b5 ac a7 04 57 17 09 45 83 c8 7e b3 fc 7c 5d 2c 5b bc 33 11 ae b7 c5 30 5a a9 84 2e b9 b2 f1 18 dd 81 86 8b 4d c9 ac bb 04 b5 99 d8 47 4f 0e f0 85 65 c6 a5 68 44 87 da f6 f3 ac 18 Data Ascii: 21^v,W)#Y6Zu"2[<>`+k?y(WieM(x$d:@.&_LV-/}^)saAmB;>ZuSKpbNUJTWTQcxzbOWE~\|],[30Z.MGOehD
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: db 87 f0 e4 f9 a1 c1 de ff 00 6a f3 4c 4d b5 bf 87 fa b1 ea e3 5f d0 36 81 15 b7 7f 47 67 c5 13 73 5b 71 ac 9c e3 3b a6 53 92 5c 8f 6f d4 ba af 2c 7f 6f e1 c8 88 9b 07 64 4e e2 c1 7a 98 f9 4a b1 32 83 47 cb 0b 3b 82 77 16 2e 50 31 b3 54 41 9c 0c 39 40 4e ea c4 ca 0c 47 e2 65 d5 4c 7f e8 d8 6a 05 7a 4b d0 33 9c 65 83 1c 4a eb 15 11 90 b3 9c 19 ce a2 73 ac ec 2c ec ac e7 59 ce b3 9d 67 38 86 f0 27 65 60 bd 4c e7 58 2f 07 f3 61 a8 45 db fc 4e bb a5 ab fe 3e 33 0d 6d a8 0c a2 c5 66 94 21 12 fa 9b 76 d2 26 c6 95 a3 08 f5 33 32 63 10 6d 5f 2e 16 94 52 41 5f 6f c5 86 b1 17 6f f4 8d ed 70 6d da b6 ed c7 56 d5 a3 6f 0d 59 6d 6e 2f 01 b2 28 b3 52 af 0f 20 9f e4 89 be 57 bb 7e 46 f9 a5 84 20 71 3d 7a d3 bb 91 7d bf 47 28 e8 8d 79 d5 6e 3a bb fa 12 cf 21 71 05 ee 26 Data Ascii: jLM_6Ggs[q;S\o,odNzJ2G;w.P1TA9@NGeLjzK3eJs,Yg8'e`LX/aEN>3mf!v&32cm_.RA_oopmVoYmn/(R W~F q=z}G(yn:!q&
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: c2 27 00 9c 02 70 09 c0 27 00 9c 02 70 09 c0 27 08 97 d3 ea 7c 36 30 61 bc b7 0d e5 58 8f 13 11 b7 1c 4f f1 b6 23 6a d8 4f 17 0d e6 26 3e 83 84 4e 11 38 44 e1 13 84 4e 11 38 44 e1 13 80 4e 01 2e a4 6d 6a 35 1d 57 95 63 36 fb b1 9a 26 1b ea 31 18 35 54 7a 78 04 e0 13 80 4b a9 00 63 fc 7f 4b 22 56 9a af 10 82 b0 27 18 9c 4b 38 84 d8 21 a8 19 c2 27 10 9c 42 0a 80 86 b0 67 10 9c 2b 38 56 04 03 f1 b3 e3 40 f3 be d0 85 2d 52 5f 25 55 bb 4b 17 2c 4b 2f 13 b6 b0 64 2c 39 6a 83 ee 02 63 dd c9 fc 56 ff 00 b0 80 11 f2 55 4f 69 4c aa e5 69 6e 48 46 ef 89 da 59 da 58 72 17 4e fa ac 5f 10 d6 77 b5 83 27 d3 df 9d dd 25 79 61 c5 99 81 66 36 57 29 fa 5d f1 a5 75 9c 42 71 09 c6 27 18 9c 62 01 a7 e1 91 ed 47 c7 f4 b2 65 56 8d bc a2 72 89 ca 27 28 9c a2 72 89 ca 27 28 9c a2 Data Ascii: 'p'p'\|60aXO#jO&>N8DN8DN.mj5Wc6&15TzxKcK"V'K8!'Bg+8V@-R_%UK,K/d,9jcVUOiLinHFYXrN_w'%yaf6W)]uBq'bGeVr'(r'(
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: 1d 36 90 35 53 89 ab 2e 3e 91 be 34 fb c6 a0 34 38 82 75 25 54 ec fa 5b f2 5f 6b a9 e4 9d 58 71 fc ba 93 a4 27 4e 75 04 aa 9e 38 de f8 bf eb fd 2f 10 07 40 48 1a 9d 3c f7 ef 9b e6 f9 ba 6e 9b e5 87 59 56 a0 6a 61 26 0d 77 6e 9b e6 f9 be 6f 9b e6 f9 ba 6f 9b e6 f9 a9 9a 99 a9 9a 99 a9 9a 99 a9 9a 99 61 3b 6a 3a 4d f3 71 96 ea 62 93 a6 a6 6a 66 e3 2d d4 ca f5 03 53 35 33 53 18 9d 10 1d da 99 a9 9a 99 b8 cb 35 25 49 d3 53 35 31 db ca ad 41 d4 cd 4c d4 cd c6 6f 9b a5 9a 96 52 74 d4 cd 4c d4 cd 4c d4 cd c6 6e 9b e6 ba 9c 5f f5 fe 95 95 07 96 e3 80 cb 88 a4 64 e3 2a 2f 99 35 89 67 94 ac 6b 1d 61 59 42 07 23 0d 74 e9 ac e9 ac e9 2c ca a7 61 ad 25 a7 69 d6 20 d4 31 95 9d 4b 8d 17 58 0f 96 3a f2 38 c4 5d 3a 6b 3a 6b 3a 6b 3a 6b 3a 6b 3a 6b 3a 6b 2c c5 50 b6 7a 6c Data Ascii: 65S.>448u%T[_kXq'Nu8/@H<nYVja&wnooa;j:Mqbjf-S53S5%IS51ALoRtLLn_d*/5gkaYB#t,a%i 1KX:8]:k:k:k:k:k:k:k,Pzl
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: 8e af ba 2b b6 bb cc 6b 1b 5c 4d 59 af ac 6d a6 a1 b7 25 34 57 76 0c 37 98 4b 00 ac c6 62 d7 a8 35 0d 38 c7 27 10 d3 2f 55 21 98 c1 ba 16 6d 69 05 8a 54 34 be b1 ad 75 0d b7 a0 08 5d b7 6e 63 37 19 a9 d7 19 37 23 54 34 a7 c9 bf 4b 24 6b 17 0c 30 18 80 4b 11 50 fa 66 89 2b c7 57 87 0c 4e a8 49 4f cf 33 58 59 e5 6c d0 96 8c ef 13 79 95 6e 16 5b ed 4f c2 cb 36 c7 bd 58 1e 39 e8 95 de a9 13 24 31 3f 1a ff 00 d9 7f c1 d9 f5 4b 5f 4d cf aa ee 28 c5 c4 c4 66 dd 7c a7 e3 77 c6 cd 9a a6 c8 76 4d 13 4c 60 37 1f 64 ff 00 65 95 ef 16 aa a1 e5 49 e8 9e 89 b5 18 d1 46 d9 7f c6 8f 8d c3 d2 db 35 56 48 76 18 0a 4c 76 d4 1f 6f fd bf f8 c9 0b ae a8 08 64 68 db 35 a5 94 11 ed 91 ef 57 c5 97 70 b6 b5 56 f4 81 e8 89 52 bc ad 36 06 f6 ab e5 fa 59 27 49 5d de 9e 79 91 ea 3a 19 Data Ascii: +k\MYm%4Wv7Kb58'/U!miT4u]nc77#T4K$k0KPf+WNIO3XYlyn[O6X9$1?K_M(f\|wvML`7deIF5VHvLvodh5WpVR6Y'I]y:
2024-10-08 17:05:08 UTC	1369	IN	Data Raw: 60 94 3e a8 60 c1 28 7d 46 61 d8 94 30 60 c1 08 4a 10 84 e9 3c 76 55 85 8a f9 5a b4 4f ca 28 a6 0c 52 2e 76 f4 8a 31 24 52 7d 0a a8 d4 71 bd b2 fa 65 ab 7b 75 e5 be e7 cb 7a 2f 7f 4c bb 19 ae 79 4b b9 14 4f 58 a2 93 6c 6c 45 88 fc 35 f7 6b b7 8e 54 ed bd 18 8f 60 d5 cd b9 e5 45 26 e9 23 d9 45 b1 55 24 8a 21 3f 93 91 87 31 57 6a 3d 8d f9 45 b9 a8 c3 ff 00 58 41 93 34 c9 93 23 d3 26 4c 99 33 b7 93 34 cf 0b 26 4c d3 26 78 39 32 64 c9 93 3c c8 ab 51 ad 9d 95 a2 11 49 e0 bd 26 8f 49 df 5b e7 97 3c 35 3c 6b 15 82 77 53 72 76 e2 d9 e4 b6 c3 ef cf 15 96 c6 f6 11 67 77 76 4d 3b 3b a4 dd 1b 3e 5b b1 48 26 d9 27 71 5a b0 4d 13 d7 ad 90 35 1b 79 07 dc 7f 7c a4 13 c3 4a cd 24 8b da 8d e9 b2 65 69 9b 3b ab 3a 99 dc 9d cc 99 32 64 c9 93 35 ee 91 48 27 7b 36 77 4c fa 3c Data Ascii: `>`(}Fa0`J<vUZO(R.v1$R}qe{uz/LyKOXllE5kT`E&#EU$!?1Wj=EXA4#&L34&L&x92d<QI&I[<5<kwSrvgwvM;;>[H&'qZM5y\|J$ei;:2d5H'{6wL<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 17:05:12 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=85230 Date: Tue, 08 Oct 2024 17:05:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 17:05:13 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=85165 Date: Tue, 08 Oct 2024 17:05:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-08 17:05:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Ecf6h1OnVN6KzM&MD=zdzaPMYk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-08 17:05:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: c29c3c6b-2a00-490f-8f22-2a98c086ea07 MS-RequestId: afb0f86d-5ed9-415f-bb7f-17ff6d2f892b MS-CV: 1UGZ7T1b7EmIPIqS.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 08 Oct 2024 17:05:20 GMT Connection: close Content-Length: 24490
2024-10-08 17:05:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-08 17:05:21 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:57 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:57 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:57 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 08 Oct 2024 05:32:11 GMT ETag: "0x8DCE75A8F43FDF4" x-ms-request-id: 6f3499de-501e-008f-5174-199054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170557Z-1657d5bbd48brl8we3nu8cxwgn00000005n000000000a8sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:57 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-08 17:05:57 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:58 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:58 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170558Z-1657d5bbd48xlwdx82gahegw4000000005h0000000006bpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:58 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:58 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:58 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170558Z-1657d5bbd4824mj9d6vp65b6n400000005h0000000007r5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:58 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:58 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:58 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 51bc07fc-401e-005b-7f58-199c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170558Z-1657d5bbd48xjgsr3pyv9u71rc00000001ag000000006b3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:58 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:58 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:58 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:58 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170558Z-1657d5bbd48tnj6wmberkg2xy80000000570000000015u8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:58 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:58 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:58 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170558Z-1657d5bbd48vlsxxpe15ac3q7n00000005ag0000000058rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:58 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:59 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:59 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170559Z-1657d5bbd48vhs7r2p1ky7cs5w00000005fg000000010f23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:59 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:59 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:59 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170559Z-1657d5bbd48vlsxxpe15ac3q7n00000005ag0000000058t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:59 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:59 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:59 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170559Z-1657d5bbd48xlwdx82gahegw4000000005dg00000000t0vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:59 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:59 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170559Z-1657d5bbd48xdq5dkwwugdpzr000000005n000000000ak5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:59 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:05:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:05:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170559Z-1657d5bbd48vhs7r2p1ky7cs5w00000005hg00000000qc3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:05:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:05:59 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+Ecf6h1OnVN6KzM&MD=zdzaPMYk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-08 17:06:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 22d64258-c273-4b87-addd-818d6d2a0d12 MS-RequestId: 4768e97e-cb5b-41a4-97ea-e47e12611d7c MS-CV: 5wekox8BhE2XbWLn.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 08 Oct 2024 17:05:59 GMT Connection: close Content-Length: 30005
2024-10-08 17:06:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-08 17:06:00 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:00 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 963c34db-c01e-00ad-34ed-18a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170600Z-1657d5bbd48brl8we3nu8cxwgn00000005f0000000015vsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:00 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170600Z-1657d5bbd48gqrfwecymhhbfm8000000044g000000009bqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:00 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170600Z-1657d5bbd48wd55zet5pcra0cg0000000540000000012dbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:00 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170600Z-1657d5bbd48q6t9vvmrkd293mg000000057000000000n8rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:00 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170600Z-1657d5bbd482krtfgrg72dfbtn000000051g00000000bupp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48dfrdj7px744zp8s000000050g00000000gty6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: e60edb0a-901e-0067-524d-19b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48xjgsr3pyv9u71rc000000018g00000000ezpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48brl8we3nu8cxwgn00000005q0000000000pb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 33ea5892-e01e-0052-0ce0-18d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48xdq5dkwwugdpzr000000005n000000000ak8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:01 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48tqvfc1ysmtbdrg0000000051g00000000ys8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:01 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48xsz2nuzq4vfrzg80000000570000000003ux9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48brl8we3nu8cxwgn00000005q0000000000pda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48jwrqbupe3ktsx9w00000005bg0000000144ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:01 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: d112c6a6-a01e-000d-2160-17d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170601Z-1657d5bbd48dfrdj7px744zp8s000000053g000000003n68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:02 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:02 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170602Z-1657d5bbd48xlwdx82gahegw4000000005e000000000pzxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:02 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170602Z-1657d5bbd48qjg85buwfdynm5w00000005ag00000000qdzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:02 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170602Z-1657d5bbd4824mj9d6vp65b6n400000005g000000000c7er x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:02 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 12bd626a-c01e-008e-0b9f-197381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170602Z-1657d5bbd48gjrh9ymem1nvr1n00000000m000000000g5x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:02 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:02 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:02 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: a4cde42a-401e-00a3-1f9c-198b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170602Z-1657d5bbd48gjrh9ymem1nvr1n00000000kg00000000h84w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 17:06:02 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:03 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170603Z-1657d5bbd482tlqpvyz9e93p5400000005bg00000000ezm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:03 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170603Z-1657d5bbd48qjg85buwfdynm5w000000059g00000000umg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:03 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:03 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 1d12b7bf-d01e-0066-799c-19ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170603Z-1657d5bbd48gjrh9ymem1nvr1n00000000q000000000brkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:03 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:03 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170603Z-1657d5bbd48vhs7r2p1ky7cs5w00000005p00000000059bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:03 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:03 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 54e9c43f-c01e-000b-6df8-18e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170603Z-1657d5bbd48qjg85buwfdynm5w00000005d0000000009cwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170604Z-1657d5bbd48xlwdx82gahegw4000000005bg000000011wwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:04 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170604Z-1657d5bbd48lknvp09v995n79000000004w000000000q3rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:04 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:04 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170604Z-1657d5bbd48jwrqbupe3ktsx9w00000005bg0000000144q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:04 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:04 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:04 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:04 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 95d6e77b-201e-0033-2ba4-19b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170604Z-1657d5bbd48gjrh9ymem1nvr1n00000000pg00000000erkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 17:06:04 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:04 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:04 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:04 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170604Z-1657d5bbd482lxwq1dp2t1zwkc00000004z000000000t1th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:04 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:04 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170604Z-1657d5bbd4824mj9d6vp65b6n400000005eg00000000my31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:05 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170605Z-1657d5bbd48gqrfwecymhhbfm8000000045g000000004v09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:05 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:05 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170605Z-1657d5bbd48sdh4cyzadbb37480000000550000000009yaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:05 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:05 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170605Z-1657d5bbd48762wn1qw4s5sd30000000056g00000000628d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:05 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:05 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170605Z-1657d5bbd48tqvfc1ysmtbdrg0000000053g00000000n59b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:05 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:05 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170605Z-1657d5bbd48lknvp09v995n79000000004w000000000q3vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: d0110a99-c01e-008d-1cf0-182eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170605Z-1657d5bbd48vlsxxpe15ac3q7n000000057000000000pvbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd482tlqpvyz9e93p540000000570000000013uu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd482tlqpvyz9e93p54000000058000000000zkb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd48tqvfc1ysmtbdrg00000000560000000008dvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd48762wn1qw4s5sd30000000055000000000dfuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd48q6t9vvmrkd293mg000000059g0000000086rc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd48qjg85buwfdynm5w00000005e0000000005e67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd48lknvp09v995n79000000004wg00000000kvmf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:06 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:06 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170606Z-1657d5bbd48jwrqbupe3ktsx9w00000005gg000000009x72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:07 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170607Z-1657d5bbd48gqrfwecymhhbfm8000000043g00000000drhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:07 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:07 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170607Z-1657d5bbd487nf59mzf5b3gk8n000000050g000000000axz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:07 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:07 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:07 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170607Z-1657d5bbd48vhs7r2p1ky7cs5w00000005m000000000fgxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:07 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:07 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:07 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170607Z-1657d5bbd48wd55zet5pcra0cg00000005b0000000001chv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:07 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:07 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:07 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170607Z-1657d5bbd48lknvp09v995n79000000004w000000000q40v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:08 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170608Z-1657d5bbd48gqrfwecymhhbfm80000000460000000002p90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:08 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:08 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170608Z-1657d5bbd48cpbzgkvtewk0wu000000005a000000000qwrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:08 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:08 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170608Z-1657d5bbd482lxwq1dp2t1zwkc00000004xg000000011727 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:08 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170608Z-1657d5bbd48sqtlf1huhzuwq70000000051g00000000a0ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:08 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:08 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170608Z-1657d5bbd482lxwq1dp2t1zwkc00000004wg000000015sk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	61794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 5a04cdde-401e-000a-239c-194a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd48gjrh9ymem1nvr1n00000000h000000000fyec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	61795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd48762wn1qw4s5sd30000000051g00000000z38z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	61796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd482lxwq1dp2t1zwkc00000004wg000000015sn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:09 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	61797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd48xsz2nuzq4vfrzg8000000054000000000ktq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	61798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd487nf59mzf5b3gk8n00000004wg00000000kacg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	61799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd487nf59mzf5b3gk8n00000004vg00000000qcb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	61801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f196d52c-b01e-0002-1604-171b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd48762wn1qw4s5sd30000000055000000000dg34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	61800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170609Z-1657d5bbd48wd55zet5pcra0cg000000057000000000nfck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	61802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:10 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c399b717-801e-008f-2897-192c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170610Z-1657d5bbd48gjrh9ymem1nvr1n00000000ng00000000fuvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:10 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	61803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:10 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170610Z-1657d5bbd48wd55zet5pcra0cg000000055g00000000vrcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	61805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170610Z-1657d5bbd48cpbzgkvtewk0wu000000005cg00000000bpby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	61804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:10 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:10 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170610Z-1657d5bbd482lxwq1dp2t1zwkc00000004yg00000000vp24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	61806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170610Z-1657d5bbd48sdh4cyzadbb3748000000051g00000000u3sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	61807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170610Z-1657d5bbd48lknvp09v995n79000000004wg00000000kvw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	61808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	564	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:11 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: f499f41a-d01e-00a1-3ea4-1935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170611Z-1657d5bbd48gjrh9ymem1nvr1n00000000h000000000fym5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	61812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:11 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	584	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:11 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 7b844039-401e-00a3-26ed-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170611Z-1657d5bbd48sdh4cyzadbb3748000000050g00000000zsvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	61811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 72fa1ab1-901e-0016-03ed-18efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170611Z-1657d5bbd48vhs7r2p1ky7cs5w00000005mg00000000cm1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	61813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170611Z-1657d5bbd48tqvfc1ysmtbdrg0000000055000000000d6ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	61810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170611Z-1657d5bbd48brl8we3nu8cxwgn00000005n000000000aa0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	61814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:11 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170611Z-1657d5bbd4824mj9d6vp65b6n400000005f000000000hc72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	61816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 8fccee85-001e-0028-6c95-19c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170612Z-1657d5bbd48sdh4cyzadbb3748000000051g00000000u3y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	61817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170612Z-1657d5bbd48gqrfwecymhhbfm8000000041000000000uudk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	61818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170612Z-1657d5bbd48762wn1qw4s5sd30000000053000000000smph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	61815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:12 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170612Z-1657d5bbd48tqvfc1ysmtbdrg0000000053g00000000n5pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	61819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:12 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170612Z-1657d5bbd48xlwdx82gahegw4000000005e000000000q0y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	61823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c7b66cba-b01e-005c-04ff-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170613Z-1657d5bbd48vlsxxpe15ac3q7n000000054000000001456m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	61822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170613Z-1657d5bbd482tlqpvyz9e93p5400000005ag00000000ndbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	61820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:13 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170613Z-1657d5bbd48lknvp09v995n79000000004x000000000fnf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	61821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170613Z-1657d5bbd48tqvfc1ysmtbdrg0000000054000000000k5c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	61824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:13 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170613Z-1657d5bbd482tlqpvyz9e93p5400000005a000000000r7ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	61825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:14 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:14 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3a04fc40-501e-007b-3b73-175ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170614Z-1657d5bbd48sdh4cyzadbb3748000000053000000000mbac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	61827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170614Z-1657d5bbd48qjg85buwfdynm5w00000005b000000000n4d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	61826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170614Z-1657d5bbd48q6t9vvmrkd293mg000000056000000000t0cd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	61828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170614Z-1657d5bbd48lknvp09v995n7900000000500000000001qm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	61829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:14 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170614Z-1657d5bbd48xdq5dkwwugdpzr000000005kg00000000kawq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	61830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	564	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 32afff6c-601e-0032-5ba4-19eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48gjrh9ymem1nvr1n00000000s00000000035s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	61831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd482lxwq1dp2t1zwkc000000050000000000nbqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	61833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48tnj6wmberkg2xy800000005bg00000000fs85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	61832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48dfrdj7px744zp8s00000004wg0000000147v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	61834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 081667a0-801e-008c-76ef-187130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48t66tjar5xuq22r800000005b0000000001r4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	61835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48jwrqbupe3ktsx9w00000005f000000000h6nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	61837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48cpbzgkvtewk0wu000000005dg000000007b7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	61838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8fe46eeb-c01e-00a2-6545-192327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48xjgsr3pyv9u71rc00000001a0000000007t9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	61836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:15 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48xsz2nuzq4vfrzg8000000051g00000000zdzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	61839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:15 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4d5cca78-701e-0021-6ae5-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170615Z-1657d5bbd48tnj6wmberkg2xy80000000580000000010kt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	61840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170616Z-1657d5bbd48xsz2nuzq4vfrzg8000000057g000000001heu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	61841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170616Z-1657d5bbd48cpbzgkvtewk0wu000000005cg00000000bpum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	61842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170616Z-1657d5bbd48dfrdj7px744zp8s0000000520000000009tf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	61843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170616Z-1657d5bbd48xlwdx82gahegw4000000005bg000000011y0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	61844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:16 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:16 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170616Z-1657d5bbd487nf59mzf5b3gk8n00000004vg00000000qcwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	61845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:17 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: c599cd29-701e-001e-56ef-18f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170617Z-1657d5bbd48xsz2nuzq4vfrzg8000000055000000000e47t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	61848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170617Z-1657d5bbd48qjg85buwfdynm5w0000000580000000012grx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	61849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:17 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170617Z-1657d5bbd48wd55zet5pcra0cg000000058g00000000d3u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	61846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:17 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170617Z-1657d5bbd48tqvfc1ysmtbdrg000000005100000000117tn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	61847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:17 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:17 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170617Z-1657d5bbd48jwrqbupe3ktsx9w00000005c0000000011byy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	61850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170618Z-1657d5bbd48vlsxxpe15ac3q7n000000059g00000000ahds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	61852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:18 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:18 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e5892914-401e-0016-4c9e-1953e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170618Z-1657d5bbd48sdh4cyzadbb37480000000560000000005hmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:18 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	61853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:18 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cad35e9e-b01e-0021-3602-17cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170618Z-1657d5bbd48sqtlf1huhzuwq7000000004z000000000r29m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:18 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	61851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:18 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:18 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: c326dec7-201e-0003-0c12-17f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170618Z-1657d5bbd48lknvp09v995n79000000004vg00000000sstp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:18 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	61854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:18 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:18 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 87e265fd-201e-0051-4fe7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170618Z-1657d5bbd48cpbzgkvtewk0wu000000005dg000000007bdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:18 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	61855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:19 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:19 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c9f5e5fc-201e-0071-5dfe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170619Z-1657d5bbd48brl8we3nu8cxwgn00000005k000000000prdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	61856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:20 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 920dbdcb-f01e-0052-0395-199224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170620Z-1657d5bbd48gjrh9ymem1nvr1n00000000mg00000000fvkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:20 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	61858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c7b470af-b01e-005c-24fe-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170619Z-1657d5bbd48sqtlf1huhzuwq70000000050000000000h561 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	61857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:20 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: dfa7567c-f01e-003f-67de-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170620Z-1657d5bbd48brl8we3nu8cxwgn00000005kg00000000k0g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	61859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:20 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 20e89b60-501e-008c-3a03-17cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170620Z-1657d5bbd48xdq5dkwwugdpzr000000005eg000000016eux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	61860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:20 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:20 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 838d7376-001e-0014-17fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170620Z-1657d5bbd482krtfgrg72dfbtn000000053g0000000030qw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	61862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7d18055e-701e-0098-56ff-16395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd48q6t9vvmrkd293mg000000057000000000nabw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	61861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b1fbfe33-a01e-003d-4fd4-1698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd48qjg85buwfdynm5w000000059g00000000unm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	61863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 770fdf22-501e-0035-0d02-17c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd482krtfgrg72dfbtn0000000540000000000ssm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	61864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c55b1dc3-701e-0097-42e9-16b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd48brl8we3nu8cxwgn00000005fg000000010stv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	61865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4543d13f-701e-0050-5a04-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd48sqtlf1huhzuwq70000000050g00000000eue4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	61866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: fba86ca6-e01e-00aa-5200-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd48sdh4cyzadbb3748000000052g00000000nzmb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	61867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:21 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:21 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 93d7690b-001e-0066-17e6-18561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170621Z-1657d5bbd48dfrdj7px744zp8s0000000540000000000z2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	61868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:22 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 85329464-c01e-0034-6acc-162af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170622Z-1657d5bbd48brl8we3nu8cxwgn00000005eg000000017hvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	61869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:22 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:22 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 7cb43a82-e01e-0033-45fe-164695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170622Z-1657d5bbd48xdq5dkwwugdpzr000000005q0000000000n6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:22 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	61870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:22 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:22 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 9139889b-001e-0079-22f3-1612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170622Z-1657d5bbd48sdh4cyzadbb374800000004zg000000013vgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:22 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	61872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:22 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:22 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: d51e0a59-d01e-005a-6cfe-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170622Z-1657d5bbd48tqvfc1ysmtbdrg0000000057g000000001ep3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:22 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	61871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:22 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:22 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:22 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 626a0b0f-301e-006e-6de9-16f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170622Z-1657d5bbd48vhs7r2p1ky7cs5w00000005q0000000000gfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:22 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	61874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 17:06:22 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 17:06:23 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 17:06:22 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: a1812648-601e-0002-69fe-16a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T170622Z-1657d5bbd48vlsxxpe15ac3q7n000000055g00000000wm23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 17:06:23 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2332, Parent PID: 5768

General

Target ID:	0
Start time:	13:05:02
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\EPAYMENT_Receipt.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1704, Parent PID: 2332

General

Target ID:	2
Start time:	13:05:04
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2532,i,2768201058952773091,14733882893006091711,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report EPAYMENT_Receipt.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_102553075\sets.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\_platform_specific\win_x64\widevinecdm.dll.sig

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1133770935\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_2084372943\optimization-hints.pb

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_672592352\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\Filtering Rules

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\LICENSE.txt

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_70311239\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_973872794\_metadata\verified_contents.json

Windows Analysis Report
EPAYMENT_Receipt.html