Edit tour

Windows Analysis Report
View alert details #20GBQ4J.html

Overview

General Information

Sample name:	View alert details #20GBQ4J.html
Analysis ID:	1531137
MD5:	8b53b47e7c6e577547360a03478aeea3
SHA1:	fbc1d70258a9422eb968e2ccb11d0bcdbe2f7d0a
SHA256:	842bd32dce47efa3882485606f64b4c1b2d625b4c1a12dacaf5f76c39a1ee213
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

HTML IFrame injector detected

HTML Script injector detected

HTML document with suspicious name

HTML file submission containing password form

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Suspicious Javascript code found in HTML file

Creates files inside the system directory

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

PE file contains more sections than normal

PE file contains sections with non-standard names

Classification

Process Tree

System is w10x64

chrome.exe (PID: 888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\View alert details #20GBQ4J.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1892,i,15348987609374010352,5781794528145663167,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /report/v4?s=LtH6Xi8Q7Gnavhp1wUbKApvKXCOHgJa%2FdQLm6ALe44LTqQuf%2B6d9x5UA2DeAVYs86HOAjRoHRNqrvB1q4Ne8g%2FoMYe7JzkNubtAkAM1m3ACBkUBvD2vheO3ialvd%2BpjKtUfUHmuGJyD49wXOAynH HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 444Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closecontent-type: text/htmlcontent-length: 146date: Thu, 10 Oct 2024 20:01:55 GMTstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-frame-options: SAMEORIGINx-content-type-options: nosniffvary: User-Agent,Accept-Encodingalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: chromecache_164.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_164.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: widevinecdm.dll.0.dr, Google.Widevine.CDM.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: View alert details #20GBQ4J.html	String found in binary or memory: https://15A69UPW.1bigcircle.com:8443/impact?impact=don.degloria
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: manifest.json2.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 61247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 61029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 61201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 61272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 61054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 61134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 61200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 61246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 61063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 61257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 61030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 61273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 61086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 61146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 61180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61226
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61106
Source: unknown	Network traffic detected: HTTP traffic on port 61210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61109
Source: unknown	Network traffic detected: HTTP traffic on port 61233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61101
Source: unknown	Network traffic detected: HTTP traffic on port 61124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61222
Source: unknown	Network traffic detected: HTTP traffic on port 61256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61103
Source: unknown	Network traffic detected: HTTP traffic on port 61147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61225
Source: unknown	Network traffic detected: HTTP traffic on port 61055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61117
Source: unknown	Network traffic detected: HTTP traffic on port 61209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61119
Source: unknown	Network traffic detected: HTTP traffic on port 61090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61230
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61231
Source: unknown	Network traffic detected: HTTP traffic on port 61106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61234
Source: unknown	Network traffic detected: HTTP traffic on port 61274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61115
Source: unknown	Network traffic detected: HTTP traffic on port 61079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61250
Source: unknown	Network traffic detected: HTTP traffic on port 61159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61129
Source: unknown	Network traffic detected: HTTP traffic on port 61091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61125
Source: unknown	Network traffic detected: HTTP traffic on port 61181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 61244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 61170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61259
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61253
Source: unknown	Network traffic detected: HTTP traffic on port 61255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61135
Source: unknown	Network traffic detected: HTTP traffic on port 61125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61258
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61204
Source: unknown	Network traffic detected: HTTP traffic on port 61126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61209
Source: unknown	Network traffic detected: HTTP traffic on port 61231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61200
Source: unknown	Network traffic detected: HTTP traffic on port 61149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61203
Source: unknown	Network traffic detected: HTTP traffic on port 61078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61216
Source: unknown	Network traffic detected: HTTP traffic on port 61104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61218
Source: unknown	Network traffic detected: HTTP traffic on port 61089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61212
Source: unknown	Network traffic detected: HTTP traffic on port 61033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61213
Source: unknown	Network traffic detected: HTTP traffic on port 61276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61214
Source: unknown	Network traffic detected: HTTP traffic on port 61115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61192
Source: unknown	Network traffic detected: HTTP traffic on port 61058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61195
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61187
Source: unknown	Network traffic detected: HTTP traffic on port 61218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61069
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61084
Source: unknown	Network traffic detected: HTTP traffic on port 61242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61197
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61199
Source: unknown	Network traffic detected: HTTP traffic on port 61253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61079
Source: unknown	Network traffic detected: HTTP traffic on port 61161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61096
Source: unknown	Network traffic detected: HTTP traffic on port 61241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61089
Source: unknown	Network traffic detected: HTTP traffic on port 61162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61099
Source: unknown	Network traffic detected: HTTP traffic on port 61140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61272
Source: unknown	Network traffic detected: HTTP traffic on port 61048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61029
Source: unknown	Network traffic detected: HTTP traffic on port 61240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61262
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61143
Source: unknown	Network traffic detected: HTTP traffic on port 61252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61265
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61267
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61269
Source: unknown	Network traffic detected: HTTP traffic on port 61080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61162
Source: unknown	Network traffic detected: HTTP traffic on port 61263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61039
Source: unknown	Network traffic detected: HTTP traffic on port 61102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61159
Source: unknown	Network traffic detected: HTTP traffic on port 61081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61171
Source: unknown	Network traffic detected: HTTP traffic on port 61251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61173
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61044
Source: unknown	Network traffic detected: HTTP traffic on port 61036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61167
Source: unknown	Network traffic detected: HTTP traffic on port 61185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61063
Source: unknown	Network traffic detected: HTTP traffic on port 61174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61054
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61175

Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:61192 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: View alert details #20GBQ4J.html

Initial sample: detail

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll.sig	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_888_1961607484

Jump to behavior

Source: widevinecdm.dll.0.dr	Static PE information: Number of sections : 13 > 10
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: mal84.phis.winHTML@34/35@22/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\View alert details #20GBQ4J.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1892,i,15348987609374010352,5781794528145663167,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1892,i,15348987609374010352,5781794528145663167,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr
Source:	Binary string: C:\b\s\w\ir\x\w\rc\cdm\protected\out\Release\widevinecdm.dll.pdb source: widevinecdm.dll.0.dr

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.0.dr	Static PE information: section name: .00cfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .gxfg
Source: widevinecdm.dll.0.dr	Static PE information: section name: .retplne
Source: widevinecdm.dll.0.dr	Static PE information: section name: .rodata
Source: widevinecdm.dll.0.dr	Static PE information: section name: _RDATA
Source: widevinecdm.dll.0.dr	Static PE information: section name: malloc_h

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\LICENSE.txt

Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/View%20alert%20details%20%2320GBQ4J.html

HTTP Parser: file:///C:/Users/user/Desktop/View%20alert%20details%20%2320GBQ4J.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll	0%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://blackrock.com	0%	URL Reputation	safe
https://idbs-eworkbook.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
kasumbo.com	108.178.43.142	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
cs837.wac.edgecastcdn.net	192.229.133.221	true	false	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	unknown
15a69upw.1bigcircle.com	188.114.96.3	true	false	unknown
fondation.chiliesdigital.co.za	104.21.81.229	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
_8443._https.15a69upw.1bigcircle.com	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
www.w3schools.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=LtH6Xi8Q7Gnavhp1wUbKApvKXCOHgJa%2FdQLm6ALe44LTqQuf%2B6d9x5UA2DeAVYs86HOAjRoHRNqrvB1q4Ne8g%2FoMYe7JzkNubtAkAM1m3ACBkUBvD2vheO3ialvd%2BpjKtUfUHmuGJyD49wXOAynH	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://easylist.to/)	LICENSE.txt.0.dr	false		unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrock.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-eworkbook.com	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
192.229.133.221	cs837.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
108.178.43.142	kasumbo.com	United States	32475	SINGLEHOP-LLCUS	false
104.21.81.229	fondation.chiliesdigital.co.za	United States	13335	CLOUDFLARENETUS	false
172.67.165.105	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	15a69upw.1bigcircle.com	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531137
Start date and time:	2024-10-10 22:00:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	View alert details #20GBQ4J.html
Detection:	MAL
Classification:	mal84.phis.winHTML@34/35@22/15
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 216.58.206.46, 64.233.166.84, 34.104.35.123, 142.250.186.74, 142.250.184.202, 142.250.185.234, 172.217.16.202, 172.217.18.10, 172.217.16.138, 142.250.74.202, 142.250.186.106, 142.250.184.234, 142.250.186.170, 142.250.185.170, 142.250.186.42, 142.250.181.234, 142.250.186.138, 216.58.206.74, 142.250.185.202, 216.58.206.42, 172.217.18.106, 172.217.23.106, 199.232.214.172, 192.229.221.95, 142.250.185.195, 142.250.185.78
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: View alert details #20GBQ4J.html

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://helawok.x-sns.cloud/	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.com/url?q=idgSDbXAkgLGa7L2qSLC&rct=vawEe6AUsKoNw4E6MJPg&sa=t&esrc=CDYfL3wdelhUBj8tOP38&source=&cd=ymcsx0CGggtkT53VPeFH&cad=rH3FDZ76Je2tPayMlEgY&ved=YMJX5WetXo4xcMnuwKLe&uact=&url=amp/fisiopopriopreto.com.br/	Get hash	malicious	Unknown	Browse
	https://anviict.com/?qvtvxymb	Get hash	malicious	HTMLPhisher	Browse
	Play_VM-Now(Eslifka)CLQD.htm	Get hash	malicious	Unknown	Browse
	bc3c228ad2c13f96cb14375c3860e802.pdf	Get hash	malicious	Unknown	Browse
	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	Get hash	malicious	Unknown	Browse
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse
	original (1).eml	Get hash	malicious	Unknown	Browse
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse
	https://soloist.ai/grcewalm	Get hash	malicious	Unknown	Browse
192.229.133.221	https://urlr.me/mqbyf	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.icvgtUtNc5cJaBmFttWZx0lJP7wz60N1IEgDE2rZRR0WhAdspQVvaZ2NC12OzAgUWBWNE0QN-2Fsdvyxcie-2FD0ZKC3o6urx-2FRDTTfkVPv834VhtsrJl2gqz591wNLQpKzEYXpK_QXnTW6f9jV7ots26-2Fd0iCIGrEmLKA7fIJlV2zKu44Xq692PuzSRgXI7ufe4Zp4v2yBHnXUYjmzxKUhhdq7NsDheV8-2FU-2B48BCY4GxHJSwqqixcyPJ0xKPnacjTbwewwuwLxdqsCE0cZa1g-2BVvdiDiusWYPMfv8nQ5qixKTMPvKW23iKpOk7F2i3sIWet01O-2Bf0gpUPkwIGMMBe-2FMckfiYlTwk5HdrNlqOSNHr0gHxqm-2F7HfeBd43rBQaYeKamlXsjYaoA8HS2RybaRjyPcl6-2BU428AbeuG4yPBr7uwpsQLBrctYlFuwP0ATA6DvGQ8-2BxzxG0aVD3BVPwiFEhPTGFc9ATAP3o5h2eZKkldAOTGYr9Nn-2BdeyffvqnrT2msnMhhyQ-2FKQ9-2B8d6Z458G4pXgw1wQ-3D-3D#abuse@umn.edu	Get hash	malicious	HTMLPhisher	Browse
	https://we.tl/t-BVtGtb0HLz	Get hash	malicious	Unknown	Browse
	Warning_Report_[Limit_Notice].PDF HES0O.html	Get hash	malicious	HTMLPhisher	Browse
	Domain_Validation_Protocol_EX-205WQMN.html	Get hash	malicious	HTMLPhisher	Browse
	Documents_Verification_Review_[PDF]_#20SE6GX.html	Get hash	malicious	HTMLPhisher	Browse
	https://sucursal-virtual123.w3spaces.com/	Get hash	malicious	Unknown	Browse
	attach.html	Get hash	malicious	Phisher	Browse
	Status Update NGKUV.html	Get hash	malicious	HTMLPhisher	Browse
	Security_Patch_Office365 6LA4X.html	Get hash	malicious	Unknown	Browse
108.178.43.142	https://climate-consultant.informer.com/6.0/	Get hash	malicious	Unknown	Browse
	Warning_Report_[Limit_Notice].PDF HES0O.html	Get hash	malicious	HTMLPhisher	Browse
	Domain_Validation_Protocol_EX-205WQMN.html	Get hash	malicious	HTMLPhisher	Browse
	Documents_Verification_Review_[PDF]_#20SE6GX.html	Get hash	malicious	HTMLPhisher	Browse
	Status Update NGKUV.html	Get hash	malicious	HTMLPhisher	Browse
	Security_Patch_Office365 6LA4X.html	Get hash	malicious	Unknown	Browse
	Status Update 2HCCR.html	Get hash	malicious	Unknown	Browse
	Feature Status Update 3RLSM.html	Get hash	malicious	Unknown	Browse
	Remittance_Details_#20O8N7B.html	Get hash	malicious	HTMLPhisher	Browse
	Status Update ECKY2.html	Get hash	malicious	Unknown	Browse
104.21.81.229	https://tonetruecrew.shreekshetrahatkeshwar-godre.com/axxcss/cgi-pers/x10/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://rfpcertstream.castlehillinfotech.com/satin/x4/cg1-b1m/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://rfpcertstream.castlehillinfotech.com/satin/x4/cg1-b1m/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
172.67.165.105	INVOICE [PAID] ref-APOVN.html	Get hash	malicious	HTMLPhisher	Browse
	https://tonetruecrew.shreekshetrahatkeshwar-godre.com/axxcss/cgi-pers/x10/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://rfpcertstream.castlehillinfotech.com/satin/x4/cg1-b1m/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	python count elements in array with condition 31718.js	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
kasumbo.com	Warning_Report_[Limit_Notice].PDF HES0O.html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	Domain_Validation_Protocol_EX-205WQMN.html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	Documents_Verification_Review_[PDF]_#20SE6GX.html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	Status Update NGKUV.html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	Security_Patch_Office365 6LA4X.html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Status Update 2HCCR.html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Feature Status Update 3RLSM.html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Remittance_Details_#20O8N7B.html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	Status Update ECKY2.html	Get hash	malicious	Unknown	Browse	108.178.43.142
	original (3).eml	Get hash	malicious	Unknown	Browse	108.178.43.142
cdnjs.cloudflare.com	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://na2.docusign.net/Signing/EmailStart.aspx?a=65ce31e3-0f62-43e8-8a06-1efc3ff79e46&etti=24&acct=f03a97ef-a21a-4b5f-a673-fe222edf542a&er=c4396d2f-541c-4d1d-bd82-7b6b044f29c3	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	Play_Now-(Sonaemc)MOPT.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://www.google.com/url?q=https://zyxd.centerspp.com/gBWWy/&sa=D&source=editors&ust=1728569033796392	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://simplexml.federalinvoice.com/uQ3xo/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://pearl-contol.powerappsportals.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://carexcondoms.com/arull.php?7088797967704b536932307464507a637a4c7a736c4d7a733752533837503155744a31586533634466584277413d1	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://flipsnack.com/BA85A977C6F/oct2024/full-view.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://linkpage.bio/verifybusinessaccount1368	Get hash	malicious	Unknown	Browse	104.17.24.14
	VoicePlayback for Olivier.grizel Tessi-solutions.htm	Get hash	malicious	Phisher	Browse	104.17.24.14
cs837.wac.edgecastcdn.net	https://urlr.me/mqbyf	Get hash	malicious	Unknown	Browse	192.229.133.221
	https://clickme.thryv.com/ls/click?upn=u001.icvgtUtNc5cJaBmFttWZx0lJP7wz60N1IEgDE2rZRR0WhAdspQVvaZ2NC12OzAgUWBWNE0QN-2Fsdvyxcie-2FD0ZKC3o6urx-2FRDTTfkVPv834VhtsrJl2gqz591wNLQpKzEYXpK_QXnTW6f9jV7ots26-2Fd0iCIGrEmLKA7fIJlV2zKu44Xq692PuzSRgXI7ufe4Zp4v2yBHnXUYjmzxKUhhdq7NsDheV8-2FU-2B48BCY4GxHJSwqqixcyPJ0xKPnacjTbwewwuwLxdqsCE0cZa1g-2BVvdiDiusWYPMfv8nQ5qixKTMPvKW23iKpOk7F2i3sIWet01O-2Bf0gpUPkwIGMMBe-2FMckfiYlTwk5HdrNlqOSNHr0gHxqm-2F7HfeBd43rBQaYeKamlXsjYaoA8HS2RybaRjyPcl6-2BU428AbeuG4yPBr7uwpsQLBrctYlFuwP0ATA6DvGQ8-2BxzxG0aVD3BVPwiFEhPTGFc9ATAP3o5h2eZKkldAOTGYr9Nn-2BdeyffvqnrT2msnMhhyQ-2FKQ9-2B8d6Z458G4pXgw1wQ-3D-3D#abuse@umn.edu	Get hash	malicious	HTMLPhisher	Browse	192.229.133.221
	https://we.tl/t-BVtGtb0HLz	Get hash	malicious	Unknown	Browse	192.229.133.221
	Warning_Report_[Limit_Notice].PDF HES0O.html	Get hash	malicious	HTMLPhisher	Browse	192.229.133.221
	Domain_Validation_Protocol_EX-205WQMN.html	Get hash	malicious	HTMLPhisher	Browse	192.229.133.221
	https://www.rashakhodro.com/o/?c3Y9bzM2NV8xX29uZSZyYW5kPWJ6RkxWV3c9JnVpZD1VU0VSMTUwOTIwMjRVMTUwOTE1NDQ=N0123Ninfo@colemanenv.com	Get hash	malicious	Unknown	Browse	192.229.173.207
	Documents_Verification_Review_[PDF]_#20SE6GX.html	Get hash	malicious	HTMLPhisher	Browse	192.229.133.221
	https://sucursal-virtual123.w3spaces.com/	Get hash	malicious	Unknown	Browse	192.229.133.221
	attach.html	Get hash	malicious	Phisher	Browse	192.229.133.221
	Status Update NGKUV.html	Get hash	malicious	HTMLPhisher	Browse	192.229.133.221
sni1gl.wpc.alphacdn.net	https://dsdhie.org/dsjhem	Get hash	malicious	Unknown	Browse	152.199.21.175
	original.eml	Get hash	malicious	Tycoon2FA	Browse	152.199.21.175
	http://pub-028eca4f9d2e4dbb932d44013f976a40.r2.dev/gxy12cloudthsue/valetguem.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://wvr4dgzxxavl6jjpq7rl.igortsaplin.pro/WFzFCiNx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://targetemissionservices.ezofficeinventory.com/users/sign_in	Get hash	malicious	Unknown	Browse	152.199.21.175
	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://palomaestro1211.github.io/microsoftlogin/	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse	152.199.21.175
	http://win2-z13-web-core-windows-net.pages.dev/	Get hash	malicious	HTMLPhisher, TechSupportScam	Browse	152.199.21.175
	http://purchaseorders.vercel.app/	Get hash	malicious	Unknown	Browse	152.199.21.175

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SINGLEHOP-LLCUS	10092024150836 09.10.2024.vbe	Get hash	malicious	FormBook	Browse	172.96.186.204
	SAS #U00e7#U0131kt#U0131.PDF.exe	Get hash	malicious	Unknown	Browse	67.212.175.162
	SAS #U00e7#U0131kt#U0131.PDF.exe	Get hash	malicious	Unknown	Browse	67.212.175.162
	GEFA-Order 232343-68983689.exe	Get hash	malicious	Unknown	Browse	67.212.175.162
	GEFA-Order 232343-68983689.exe	Get hash	malicious	Unknown	Browse	67.212.175.162
	https://climate-consultant.informer.com/6.0/	Get hash	malicious	Unknown	Browse	184.154.77.10
	Halkbank_Ekstre_20240508_074644_755730.pdf.exe	Get hash	malicious	AgentTesla	Browse	67.212.175.162
	Kuwait Offer48783929281-BZ2.exe	Get hash	malicious	AgentTesla	Browse	67.212.175.162
	RFQ-350548 P1-00051538.pdf.exe	Get hash	malicious	Unknown	Browse	67.212.175.162
	RFQ-350548 P1-00051538.pdf.exe	Get hash	malicious	Unknown	Browse	67.212.175.162
CLOUDFLARENETUS	https://helawok.x-sns.cloud/	Get hash	malicious	HTMLPhisher	Browse	172.64.146.38
	Yx1Wz608PO.exe	Get hash	malicious	Unknown	Browse	172.67.183.40
	Yx1Wz608PO.exe	Get hash	malicious	Unknown	Browse	172.67.183.40
	https://anviict.com/?qvtvxymb	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	Play_VM-Now(Eslifka)CLQD.htm	Get hash	malicious	Unknown	Browse	188.114.96.3
	bc3c228ad2c13f96cb14375c3860e802.pdf	Get hash	malicious	Unknown	Browse	1.1.1.1
	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	Get hash	malicious	Unknown	Browse	162.247.243.39
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	104.21.54.168
	original (1).eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	104.21.54.168
CLOUDFLARENETUS	https://helawok.x-sns.cloud/	Get hash	malicious	HTMLPhisher	Browse	172.64.146.38
	Yx1Wz608PO.exe	Get hash	malicious	Unknown	Browse	172.67.183.40
	Yx1Wz608PO.exe	Get hash	malicious	Unknown	Browse	172.67.183.40
	https://anviict.com/?qvtvxymb	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	Play_VM-Now(Eslifka)CLQD.htm	Get hash	malicious	Unknown	Browse	188.114.96.3
	bc3c228ad2c13f96cb14375c3860e802.pdf	Get hash	malicious	Unknown	Browse	1.1.1.1
	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	Get hash	malicious	Unknown	Browse	162.247.243.39
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	104.21.54.168
	original (1).eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	104.21.54.168
EDGECASTUS	https://anviict.com/?qvtvxymb	Get hash	malicious	HTMLPhisher	Browse	152.199.19.161
	79VAlgfTk8.elf	Get hash	malicious	Mirai	Browse	93.184.209.10
	36.msi	Get hash	malicious	Numando	Browse	152.195.19.97
	33.msi	Get hash	malicious	Numando	Browse	152.195.19.97
	QbAwyjyAk3.lnk	Get hash	malicious	Numando	Browse	152.195.19.97
	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse	152.195.19.97
	26.msi	Get hash	malicious	Numando	Browse	152.195.19.97
	https://www.newtonsoft.com/json	Get hash	malicious	Unknown	Browse	152.195.19.97
	Play_Now-(Sonaemc)MOPT.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://www.google.com/url?q=https://zyxd.centerspp.com/gBWWy/&sa=D&source=editors&ust=1728569033796392	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://helawok.x-sns.cloud/	Get hash	malicious	HTMLPhisher	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	https://www.google.com/url?q=idgSDbXAkgLGa7L2qSLC&rct=vawEe6AUsKoNw4E6MJPg&sa=t&esrc=CDYfL3wdelhUBj8tOP38&source=&cd=ymcsx0CGggtkT53VPeFH&cad=rH3FDZ76Je2tPayMlEgY&ved=YMJX5WetXo4xcMnuwKLe&uact=&url=amp/fisiopopriopreto.com.br/	Get hash	malicious	Unknown	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	Get hash	malicious	Unknown	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	https://soloist.ai/grcewalm	Get hash	malicious	Unknown	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	vmsg_0101024.htm	Get hash	malicious	Unknown	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse	95.100.63.156 172.202.163.200 13.107.246.45
	brayton HR Bulletin_270852_3BU4-ZSJO2U-JMY3.pdf	Get hash	malicious	Unknown	Browse	95.100.63.156 172.202.163.200 13.107.246.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse
	ATT00001.png	Get hash	malicious	Unknown	Browse
	shelbycountytn.gov.pdf	Get hash	malicious	Unknown	Browse
	https://google.com/amp/s/login.sharesyncportal.tech/dmYzPMej	Get hash	malicious	HTMLPhisher	Browse
	EPAYMENT_Receipt.html	Get hash	malicious	Unknown	Browse
	Audio_Msg..00293614554893Transcript.html	Get hash	malicious	Unknown	Browse
	http://kendellseafoods.com/	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	Farahexperiences.com_Report_52288.pdf	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll	shelbycountytn.gov.pdf	Get hash	malicious	Unknown	Browse
	EPAYMENT_Receipt.html	Get hash	malicious	Unknown	Browse
	Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html	Get hash	malicious	HTMLPhisher	Browse
	https://qrco.de/bfQgn5	Get hash	malicious	Unknown	Browse
	Inv_Doc_18#908.pdf	Get hash	malicious	Unknown	Browse
	http://www.revsharboomerang.com	Get hash	malicious	Unknown	Browse
	AMA - 375,545.04.htm	Get hash	malicious	Unknown	Browse
	ACH Payment Details_(Dcorbett)CQDM.html	Get hash	malicious	Unknown	Browse
	doc_inv_09-12#965.pdf	Get hash	malicious	Unknown	Browse
	bot_library.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: btm4e0L3pw.lnk, Detection: malicious, Browse Filename: ATT00001.png, Detection: malicious, Browse Filename: shelbycountytn.gov.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: EPAYMENT_Receipt.html, Detection: malicious, Browse Filename: Audio_Msg..00293614554893Transcript.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Farahexperiences.com_Report_52288.pdf, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	74272
Entropy (8bit):	5.535436646838848
Encrypted:	false
SSDEEP:	1536:GB9Cdg51kGLmOSe1pEQHdPr4l0TmmJ2I7CwguaRZrgMQUavJX5vwKf:Sok1RLtb1ptdPrYk1J2IPguangMQ3X5P
MD5:	B23DD5B6ECCB460003EA37BA0F5E3730
SHA1:	FD444553CB7699F84CE7E5664232771673DCF67D
SHA-256:	7F7F432C27D97DEE184DCD3EA20F731674C008BE849C0136F9C5358E359F3EA9
SHA-512:	7E47BD172C4BD4C65F063A8FA3FB33ED47F29156EB20E42D4E8EA73C6F02526A30FFE907BE5B7C1406D4EAA71FBEC7C0D557C376DCCD0A1A961E2F61B3431181
Malicious:	false
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.thubanoa.com^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.adrecover.com^..........0.8.@.R.pemsrv.com^..........0.8.@.R.mnaspm.com^..........0.8.@.R..ar/ads/."......0.8.@.R./plugins/cactus-ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_.>...........worldstar.com0.8.@.R.js.assemblyexchange.com/wana...........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^.(........0.8.@.R.shikoku-np.co.jp/img/ad/..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.clicktripz.com^..........0.8.@.R.-ad-manager/..........0.8.@.R./page-links-to/dist/new-tab.js........0.8.@.R.files.slack.com^.$........0.8.@.R.admitad-connect.com^.2........0.8.@.R"cloudfront.net/js/common/invoke.js..........0.8

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.990179229242317
Encrypted:	false
SSDEEP:	24:pZRj/flTHYe1DxxpTkYbKCCojeT31zkaoX63wMHF48I31RwCCyqoX6kyKlklyJqw:p/h4YDxxlbKlTlkakgPLI3hCyqkwnlKD
MD5:	2FF08C4B4128F634CBBFEA0C1C44AA2E
SHA1:	45D11E57DDF29E843AC8545C7D06CDDB5DF3E962
SHA-256:	33B6F2ECD5FB7F9FAF538F29808716EFA337A653809943A8E4B5E450B734DA09
SHA-512:	14BD9E921E1DB9AC8720C1177897DB624292865D29B976ED9CCCEE572726D7D123A8F39E470987DF796AE0552861FBAE056CDB395F0CB8B0E699C28F5E221999
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"ifBoq-woYhqxB78EqRoo2fPRIEfkuykYMlD9kWeeG2QS6-R5YvGNJ9n5OljLXGjvK5U3MDFRLi-UCguxuUaoFjU_QeSCiOLxvDS5JHdk8Bbba8fCW6ZKnH_fvocQD8W7Hj0reH3gOPmD7sIraz8IvG86GRuGPqsxbgc_BRtOCa5KRgqaxfjt7tKlOtaUoO3_qsNlf_8F8k0tNZh131RRIEaXw53z3ZzGpWtgYC0u6s0JKag8l

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8568101737886993
Encrypted:	false
SSDEEP:	3:SWcgK7GtszDAAnHT:SWc97GWzDlnHT
MD5:	6DBEDE254AF8A23D6CB2ABAEA8D2E38F
SHA1:	A827D46FA5D53CB7B134F143CC15A30BA015ED21
SHA-256:	376ED55CD5AB45C0F7BAA1AF0AC2637C33DEA6D1D4683B729AE7CE764F70DAA1
SHA-512:	0F28FD8AF582C18ECCCC1321B94902501D31C4B6C1D11684780DED6217C14E1B313F58A644516F37AE69232F1C2861915337A4D84185E18124F40C629A50B7F9
Malicious:	false
Preview:	1.3651711652892acf34795b2c7e4d401ed2274c20e952f65cf52deeeef5bbf9b5

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.547350270682037
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1KPYn:F6VlMZWuMt5SKPS1eY
MD5:	3448D97DA638C7EF0FBCA9B6949FFC8F
SHA1:	36D8434F26F0316FAB4627F7856FCA7291FE8ADF
SHA-256:	1700A11FD1E58367B450A41B2AE5FD26ECB5CDB459869C796C7DDE18F1D30F73
SHA-512:	9BF9055B2EF82BD1D2A1E94009FED2D3481FE2DC336D306FA0DB786658EFA5B72C9A9A214A829B9FCC4222476051871FF012009C64F09B9109072ABDF3DEF8CC
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.51.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	473
Entropy (8bit):	4.388167319950301
Encrypted:	false
SSDEEP:	6:LOT6w+DmsDZrkrDxBYRgELGNB+cIMLohXOl0t1iKR/UFioWd9+iAt4jZMeLhJoUs:iwDtVEDsCDLeelyigqBjt4eK2f55
MD5:	F6719687BED7403612EAED0B191EB4A9
SHA1:	DD03919750E45507743BD089A659E8EFCEFA7AF1
SHA-256:	AFB514E4269594234B32C873BA2CD3CC8892E836861137B531A40A1232820C59
SHA-512:	DD14A7EAE05D90F35A055A5098D09CD2233D784F6AC228B5927925241689BFF828E573B7A90A5196BFDD7AAEECF00F5C94486AD9E3910CFB07475FCFBB7F0D56
Malicious:	false
Preview:	Google LLC and its affiliates ("Google") own all legal right, title and.interest in and to the content decryption module software ("Software") and.related documentation, including any intellectual property rights in the.Software. You may not use, modify, sell, or otherwise distribute the Software.without a separate license agreement with Google. The Software is not open.source software...If you are interested in licensing the Software, please contact.www.widevine.com.

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1550
Entropy (8bit):	5.9461543350675905
Encrypted:	false
SSDEEP:	48:p/hFkmoyMTI1jglp6NjkakKwk+R2VJAz5s:RhMka5adwTYQz5s
MD5:	98B310FC33843D771DA0089FA155EDB2
SHA1:	5690A43F43673B947EB4C433CB4F5488A287E29C
SHA-256:	28F09A4AF935D2894689CC00658D597257422CAFF20A01055EFD8E78AD5E829F
SHA-512:	E76830974EA54C94E857179CA0DA893E088034367CA5C33E71C1016B788E737D65AB49AD9A9E6FEB85385B963AF5C13DB0A91E3F3072AC91600E91A1CEA0AB6F
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KnESAO6ts6E14P0aoVwC_yghkUn7_i9PCMh0NvK44eLJL04dv

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	19236784
Entropy (8bit):	7.70214269860876
Encrypted:	false
SSDEEP:	393216:FPRzXYeXFyjsrZuvpYl5SJIhw7PJeP9TZHZMaMq0Vrq8P:DFyjs0pYl1hwDJeVT7erq8P
MD5:	9D76604A452D6FDAD3CDAD64DBDD68A1
SHA1:	DC7E98AD3CF8D7BE84F6B3074158B7196356675B
SHA-256:	EB98FA2CFE142976B33FC3E15CF38A391F079E01CF61A82577B15107A98DEA02
SHA-512:	EDD0C26C0B1323344EB89F315876E9DEB460817FC7C52FAEDADAD34732797DAD0D73906F63F832E7C877A37DB4B2907C071748EDFAD81EA4009685385E9E9137
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: shelbycountytn.gov.pdf, Detection: malicious, Browse Filename: EPAYMENT_Receipt.html, Detection: malicious, Browse Filename: Capelleaandenijssel.nl_reff_9918205228_HelNc2Zf7n.html, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: Inv_Doc_18#908.pdf, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AMA - 375,545.04.htm, Detection: malicious, Browse Filename: ACH Payment Details_(Dcorbett)CQDM.html, Detection: malicious, Browse Filename: doc_inv_09-12#965.pdf, Detection: malicious, Browse Filename: bot_library.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Gf.........." ......o.........P.l......................................p].....c.%...`A..........................................!.......!...... ]......`[..$...f%..!...0].0:....!.8.....................!.(...`cp.@...........p.!..............................text.....o.......o................. ..`.rdata..x.....o.......o.............@..@.data...pv8...".......".............@....pdata...$...`[..&....#.............@..@.00cfg..0.....\.......$.............@..@.gxfg... (....\......$.............@..@.retplne......\.......%..................rodata.......\.......%............. ..`.tls..........\.......%.............@..._RDATA..\.....]...... %.............@..@malloc_h......]......"%............. ..`.rsrc........ ]......$%.............@..@.reloc..0:...0]..<...%.............@..B................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll.sig

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	7.572464059652219
Encrypted:	false
SSDEEP:	24:38H/VZn47VBRxgCUQuODHBJeriJ8yojUdnkLvXWgl0oHLrUXAokYH/o8j/bmspTh:38HdurRxHSOlAiqYoXWVDXJ/o8zbmsFh
MD5:	A19EC48B4B28F3AA9C32150DCA8C0E39
SHA1:	02981E40B643C2A987D47BF58F42B7F3CA5AAF07
SHA-256:	D363751B0EE48517DA1B56C17FFCD78DD57F25B092B09879667DB10338077621
SHA-512:	718A24E1FB45AB0FD3DB5A5C45B0E0061D9061D8615E2A8D6DB2150BF72267E96774094A6FC07A250D5BBBC5133A1CB635D8F7ADC5B1751FA99327FCE9555941
Malicious:	false
Preview:	....0...0...........6cd/+J.v{..B...0....H........0}1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1"0 ..U....widevine-codesign-root-ca0...171013173909Z..271011173909Z0y1.0...U....US1.0...U....Washington1.0...U....Kirkland1.0...U....Google1.0...U....Widevine1.0...U....widevine-vmp-codesign0.."0....H.............0.........2F..8.e..-....$r...{^........0.%.HA...sA"D.q.=6...#.J.N.......&..k;.+...<xF.......B8.)S....o..\|Ci.F.A6....J.......Y..4..{.5u.9N...=...#.M..s.F!j.f%&ld.R...?!Ot@......#.f..O..[.V.p0y....+...S.].....M.=.9...>.. ........>.:....1tl.....`D/c..j..........0..0...U......L...cC.E..R.n...$.0...U.#..0....=..tW....!.B.#U).0...U....0.0...U........0...U.%..0...+.......0...+.....y........0....H.............g.."..[..t{.4~.,.G....4K.....(x$...} ....N..b\|d......h..u6?.L.(&.Oup...$!...4R. 5.-...s...K/..U[..[.+.sAX*.~...^0..ba>;.#....x...b.-1...E..l....S.n.a....)U .q..C>d:...<[..F5...7...[.-.l}.T Lc.X..Qf...z..:.Q..e.m

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9232676497295262
Encrypted:	false
SSDEEP:	3:SQTWAEVtGbSHaqHGDTzoARPkBDF:SQyANeayyTzTP6
MD5:	5BFBCC6E7AA3E9C1570C5C73F38FA8EA
SHA1:	497BAFA5658C6CE8C8010D12F104EEBEC7A1BAE2
SHA-256:	84470096167EA43C0880B39FE44B42F552014E4F85B66805C2935C542BA3CB8E
SHA-512:	41BBED6CC317FF190189D63D6D5910D30E23A5160E5FF5F635FF408AAB13452DA8174556D7120DB176701435A3329A93A7450583404D56C34A37B67F1A332EDC
Malicious:	false
Preview:	1.567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	4.774546324439748
Encrypted:	false
SSDEEP:	24:ulaihI11X1TRuRckckH3WoA0UNqLQxUNqmTxyNq+TA:C1hYl1uRfckHkseDA
MD5:	2FF237ADBC218A4934A8B361BCD3428E
SHA1:	EFAD279269D9372DCF9C65B8527792E2E9E6CA7D
SHA-256:	25A702DD5389CC7B077C6B4E06C1FAD9BDEA74A9C37453388986D093C277D827
SHA-512:	BAFD91699019AB756ADF13633B825D9D9BAE374CA146E8C05ABC70C931D491D421268A6E6549A8D284782898BC6EB99E3017FBE3A98E09CD3DFECAD19F95E542
Malicious:	false
Preview:	{. "manifest_version": 2,. "update_url": "https://clients2.google.com/service/update2/crx",. "name": "WidevineCdm",. "description": "Widevine Content Decryption Module",. "version": "4.10.2830.0",. "minimum_chrome_version": "68.0.3430.0",. "x-cdm-module-versions": "4",. "x-cdm-interface-versions": "10",. "x-cdm-host-versions": "10",. "x-cdm-codecs": "vp8,vp09,avc1,av01",. "x-cdm-persistent-license-support": true,. "x-cdm-supported-encryption-schemes": [. "cenc",. "cbcs". ],. "icons": {. "16": "imgs/icon-128x128.png",. "128": "imgs/icon-128x128.png". },. "platforms": [. {. "os": "win",. "arch": "x64",. "sub_package_path": "_platform_specific/win_x64/". },. {. "os": "win",. "arch": "x86",. "sub_package_path": "_platform_specific/win_x86/". },. {. "os": "win",. "arch": "arm64",. "sub_package_path": "_platform_specific/win_arm64/". }. ],. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	3737
Entropy (8bit):	7.94752066872865
Encrypted:	false
SSDEEP:	96:l4/5iJ0uVYsXxkjbZS88oCxlHpxmJJ+63NPM8O1s:WxiOuVYKmIDxWVVx
MD5:	8653A82F18BD2DAB81924EF6ECDB2224
SHA1:	1C19DE541AB1806D7BC96C3BDE7553F89954978F
SHA-256:	5FBDDDCFE28AC07A38172F6C9D9E05F0527CC6F8461F49FC05D366082F18B5FB
SHA-512:	B0EDD1EB20F3390F083DAC5F5113A6DB51D6E8181573195BAAA639D8D8F62CCBC97829AB4F240E90DC3BF30A02933AC782EFB0949B3F9197ED6793D401D58589
Malicious:	false
Preview:	Q.}. ..k.._.z.}R..U..D....6..j..P...!S+oh..0b.r~.3..;7}.....5..k...iU:.<q.......c?!'g'..k...9.......n......?...';.t......cc......(..w..._..3...B\..5....p....E..)b.T....8}...ui.....-....z..\|..).a....i...m... 0.:.M.....!.....r..-.q.\|....os.f....#......i..z..!..q\|..,n..$..@yItE..\...L!.-n..wT..r..!.=..5......y.=.fq.Kz<.GZ..........c:.{.#7.^.....D.k.....'?e......i...my..f.e.d}(.Dc.t+...\|.!.p.......%.............G....@..d.A....%..\....$pF6.I..B.K..,.#+...O......$.I...>1.A.;...EGE...A.O......D...Fx.......f....^R..\|..y...<.L.A.59'1.C.8...+\..$\|b....,0..5$+.^....q..9..5.%.......d....%Y.5M..&...p~$.....1........p....y...q..7...D...j...[.~.?g.,b...DV5~...-/].i..S".VcS..b.>1a[ ..9..4.....]....w...F.D....s.i.....h.M)....}.V.?....$f..a.&.\H)....a_V5.p}.1.bV2_......Q...g.J...R.%..4KU./.;...8.....qvbA.I.$38...C..G.iN.....[ .a@..K.o.<b...G.]L0...u.~8t.F.z.s..m...A.U.SHe.3.Be...^x.=.d+\|.`o...C.%...198!...J\.Y.K..-q....?f.0.I...$..:.....*n.b...xp_.y.@...../`.-k5.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.110577243331642
Encrypted:	false
SSDEEP:	3:DoyCIkYn:My7R
MD5:	86D2F51458C74E8CA9C547F8760B477B
SHA1:	028E46314FBD5C2C075D852B8100E85D9595F7FB
SHA-256:	32F02AC3C8E348CEB77C79A838ECF87FDA43EDA01446E26EC569816F0976D814
SHA-512:	C404F69390FCD86A1DC4D4A4BA5B138EFA164290FD6A65D2A1511E49A9F7D96A8CE15BEBA81DF4DA605DC8CF8B4A6130B256C14DF23FD5590DEADD7CFAE5A466
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn6Lf0WlhZ9lhIFDTAIpukSBQ14RS7i?alt=proto
Preview:	ChIKBw0wCKbpGgAKBw14RS7iGgA=

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	522234
Entropy (8bit):	7.996684497788836
Encrypted:	true
SSDEEP:	12288:dzsR5bL2rOcp6lwdbTdffWJoCrBmSVeiZGzrHsxmADX6lq5xS1:+aFp6ladfvCrB4hzrHd0Qb
MD5:	98F8952CF960D6161F00C6E4ABCFE359
SHA1:	52CC74400A290CDF7AF006320F3FCC345ADB50B0
SHA-256:	FF1A66C7EF6260CB21701AE1DC98D5A1B085620CE43C1D151D1B28EB0EF592C8
SHA-512:	61A36B323B89417E80D95252B252EDF6D5B840FE3C5408516292607B3574BB94C134F44F2C466F08DC72286E125987AC5A7C30567FC458B052E54C3366F6BAF3
Malicious:	false
URL:	https://15a69upw.1bigcircle.com:8443/impact?impact=don.degloria@everbridge.com
Preview:	c....Q...@#e...........)...;...ax.8.\|<X..n;..!...%.._.....yLcu..<W......'...A.p..s...L{%(h-.....Y;.N..!._@..?..I.M..M.l.. ?`..4.\|...U..e.f..Q.$;."........U..6V4.'.l.Y.e.........g.I....[...h..a...]..e...s..?.C.$..]c.(.6\|.[..3b..*#<....4.e..."...:.b.\.OMX.......+W....\|..a....7..Z:.+k..w.....+.._).J[a8.q._..x.U\Kg..Kg.GX.U..k._k...uRA.....<.......)..C......}.U0...<.VN..m.3,Yzt{=..+'....f.~.P....N1d..........H,....@,7<?\e..'q.`.Z....y....\Frh..sx.....r..0d..v'.h....4.z+.LM!N.U...v..T....7.....n...N.J.a.g......R.b....;....iS....a.:...d..K0.....c.......).>..S.7W.`..7.B]......X;.......G.....-..`.d...Q.0.J.{...&.xey.~..qM4u..7Y.D......X.M........zY.?~~\<..Ay.\...uY.q^.[.+.'..p."....N.wK'4$7"L.:5.y..'7..>............#..Gk"^.f.........Xk".5....OWA..t5T.2.{M.g]....#..-..]pqOt)GB..lJ..K.t$.].GI"<M......I...1j.W....[K6,!<%.B.....H.q.BI.........X.`o..H....j.....)#. ..r%..P.........b7os..Di........z....M.UP..~<.B.ZbHXOM.%ya...`.//..".DK.(...

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	3739
Entropy (8bit):	7.931088994131679
Encrypted:	false
SSDEEP:	96:QCd60OOc2uYmTexCYBMSLj4uS7C2JyrW8BqsLL/:QCdUve1MNu+fyPBq4/
MD5:	39DE5FFCF2AF90C3CFEA01B0F7294466
SHA1:	0B0EFB3CE1AC3855CF0111DD1CD80ECBA717DB9A
SHA-256:	B1FA4CF5EB253BD3BEE0C24A1801978A1EEE8329A9110EAD861FA11BDE1D6B50
SHA-512:	6B3C91C265EAD47A9DC80C54DEFA3C8833CDA8408E33CB9118C5700100CEF50A89D9F29C931E5CF2BF62BE696365A0AA12BFC62E2EA6567D54DFFADD9237ECCC
Malicious:	false
URL:	https://15a69upw.1bigcircle.com:8443/cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js?
Preview:	Q.\|............z]._...L....F.D{.G.....SS.AH..........6.....#...fI<d3Y7BC7!=."..Z..i3........`..7c....."$Z..3.FH..'`........Sn...=.....ED...[.V...KV\|.v./.._.......U........B;...x]. z......zx-.'..7Tp...j.$x9........G......N..\.g.z.-.<...-./(n...[..^.j#..jL.DlE(.Q....z....I.?.wE...y.E.+.. V....>^....,.a..../..\|...}A;~.k.}...n....k._xc.>.r~......v.P.W...QX.E.p...3.......S(..>.~..yC...c..AE>..`............4.1MhJ3....@..D..kY.'.@}.....i...H...F\|.h..&,.M..+..G.........n....O..6...a.e.O..@E>.xDZn^..?./=4.........h`DOx..H?..9.........0.{F....Z.P..i..(...w...T....5.!).I.'.n.%........E..u......d.;..C.. .6[1....&.4Y...0...........z..%r\..V!I"....m..J........#e.......:z.h...a.s{..O....h.4w..m../..XOL...6.....%...)..'y.0m4.e.>.G.Y...O..bU.0.1.....b_.TF..J........v.mu...gl..l.[.8..U]...D.;N.)z.V.W.x..x.$......^..I......8Q. .......+..~....Z.o....!......}.h...]..)/...F.n'........OC]..m....g..\+.......1.4aES..<..i..z`I3v..n..zfxF3.%."..'...\|

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	23427
Entropy (8bit):	5.112735417225198
Encrypted:	false
SSDEEP:	384:1HHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:1HHCLYXfl1q8CarY64Cb+dl
MD5:	BA0537E9574725096AF97C27D7E54F76
SHA1:	BD46B47D74D344F435B5805114559D45979762D5
SHA-256:	4A7611BC677873A0F87FE21727BC3A2A43F57A5DED3B10CE33A0F371A2E6030F
SHA-512:	FC43F1A6B95E1CE005A8EFCDB0D38DF8CC12189BEAC18099FD97C278D254D5DA4C24556BD06515D9D6CA495DDB630A052AEFC0BB73D6ED15DEBC0FB1E8E208E7
Malicious:	false
URL:	https://www.w3schools.com/w3css/4/w3.css
Preview:	./* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /.html{box-sizing:border-box},:before,:after{box-sizing:inherit}./* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */.html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}.article,aside,details,figcaption,figure,footer,header,main,menu,nav,section{display:block}summary{display:list-item}.audio,canvas,progress,video{display:inline-block}progress{vertical-align:baseline}.audio:not([controls]){display:none;height:0}[hidden],template{display:none}.a{background-color:transparent}a:active,a:hover{outline-width:0}.abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}.b,strong{font-weight:bolder}dfn{font-style:italic}mark{background:#ff0;color:#000}.small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}.sub{bottom:-0.25em}sup{top:-0.5em}figure{margin:1em 40px}img{border-style:none}.code,kbd,p

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.1379078374848905
Encrypted:	false
SSDEEP:	3:gy0FKXFiByUC/C4YhEXALn:gy0FKXEIU6CXXLn
MD5:	FDEE505F4C7217B54F3E993310BDA10C
SHA1:	F9A7AB72AA4F8FF014C96C49FB26941F894444F4
SHA-256:	FA61DE3A0343CBB704561562FC08B8C3DE8E85E80B64F7CE31324CBFCC5BEED2
SHA-512:	A5FA55DDC99FF867AF9C0BE462394E851AEB2FC340CA7CBF6DBED8AA035B8B26D66B442AE1CE5A8E3208D8753FC8BB9434122A2C9CEC61A08CE8D5B26A733C68
Malicious:	false
Preview:	..One or both of the values 'usrn' and 'psrd' are missing.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.500971935207156
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	View alert details #20GBQ4J.html
File size:	3'840 bytes
MD5:	8b53b47e7c6e577547360a03478aeea3
SHA1:	fbc1d70258a9422eb968e2ccb11d0bcdbe2f7d0a
SHA256:	842bd32dce47efa3882485606f64b4c1b2d625b4c1a12dacaf5f76c39a1ee213
SHA512:	05779c6ae48c488ded1801d50623aa69b0c8a8c08cb4051200c7c5a2a665ed37848d429c1cf8a6205e50c182fe7b27b65018fafd3f56a6d60955d77680ddaedb
SSDEEP:	48:tnDOdO7QQJs9ztRtqld29/3XCNnAVo/TVWDLGsUJeRIuqu/e4QPW5q2Wsljvya3:9DONRtjqs+obDDQPWFWslOE
TLSH:	B4816122658160054573D368AF72761CEF268287630661E93EEC634B4FF6BC985A3FDC
File Content Preview:	<!DOCTYPE html>..<html lang="fr">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Home \| Microsoft 365</title>.. <style>.. /* Basic style reset /.. {..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 22:01:52.578644037 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 10, 2024 22:01:54.516292095 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.521435976 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:54.521513939 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.521771908 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.526665926 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:54.987715960 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:54.987746000 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:54.987926960 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.990567923 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.990771055 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.990956068 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:54.996213913 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:54.996345043 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:54.996686935 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.085726023 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.086143017 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.092474937 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.349419117 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.398037910 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.509093046 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509110928 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509125948 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509152889 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509167910 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509181023 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509186029 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.509197950 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509238005 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.509238005 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.509634972 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509680033 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.509708881 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509726048 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509773970 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.509870052 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509885073 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.509932041 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.510509014 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.510736942 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.510782003 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.514061928 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.514178991 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.514225960 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.526752949 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:55.526809931 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:55.527852058 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:55.528037071 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:55.528052092 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:55.545742989 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:55.545789003 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:55.545977116 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:55.546297073 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:55.546312094 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:55.595618010 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595659971 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595681906 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595696926 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595710993 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595726967 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595767975 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.595767975 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.595767975 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.595849037 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595917940 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595932961 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.595948935 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596107960 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.596107960 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.596510887 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596582890 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596596956 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596632004 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.596754074 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596766949 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596781015 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596795082 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.596806049 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.596837997 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.597505093 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.597553968 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.597584009 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.597598076 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.597639084 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.598313093 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598326921 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598340988 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598352909 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598371029 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.598402977 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.598519087 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598639011 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598653078 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598685026 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.598784924 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598799944 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598814011 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.598831892 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.598860979 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.682333946 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682360888 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682375908 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682389975 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682404995 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682418108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682729959 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.682965040 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.682984114 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683007956 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683022976 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683037043 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683051109 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683063984 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683079004 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683095932 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683182001 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683203936 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683201075 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683201075 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683201075 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683201075 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683218002 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683233023 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683248043 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683278084 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683278084 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683324099 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.683759928 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683820009 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683835030 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.683892012 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.684000015 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684015036 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684030056 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684045076 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684050083 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.684078932 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.684268951 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684320927 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.684654951 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684731007 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684746027 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684783936 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.684916973 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684931993 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684947014 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684962988 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.684983969 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.685014009 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.685216904 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685583115 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685636997 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.685683012 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685698032 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685733080 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.685846090 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685861111 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685875893 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685890913 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.685895920 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.685925961 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.686094999 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.686561108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.686613083 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.686628103 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.686641932 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.686686039 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.686772108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.686788082 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.686815977 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.732965946 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.758308887 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:55.758399010 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:55.758497953 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:55.758724928 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:55.758758068 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:55.770184994 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770232916 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770250082 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770405054 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770420074 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770435095 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770437956 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.770450115 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770525932 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.770525932 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.770772934 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770788908 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770802975 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770817995 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770833969 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.770840883 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.770879984 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771064043 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771236897 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771251917 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771265984 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771281004 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771296024 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771310091 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771310091 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771326065 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771328926 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771359921 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771388054 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771765947 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771780968 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771795034 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771809101 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771822929 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771825075 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771838903 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.771858931 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.771886110 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.772341967 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772356987 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772372007 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772386074 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772398949 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772413969 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772414923 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.772428989 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772444010 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772448063 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.772459030 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772473097 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772475958 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.772486925 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772496939 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.772501945 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772516966 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.772537947 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.772578955 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773035049 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773144007 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773159027 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773202896 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773231030 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773320913 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773335934 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773350000 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773365974 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773391962 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773422003 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773611069 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773626089 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773639917 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773654938 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773668051 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773677111 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773684025 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773694992 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773727894 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.773947954 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773962975 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773977041 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.773991108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774005890 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774019957 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774029970 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774034977 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774066925 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774404049 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774419069 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774432898 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774446964 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774461031 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774475098 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774476051 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774509907 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774720907 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774734974 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774749994 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774771929 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774777889 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774786949 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774801016 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774801970 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774816036 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.774844885 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.774873018 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775202990 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775218010 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775232077 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775245905 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775259972 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775270939 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775274992 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775288105 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775342941 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775588989 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775604963 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775619030 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775634050 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775655985 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775659084 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775672913 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775682926 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775698900 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.775752068 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.775955915 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.776027918 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.776031017 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.776047945 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.776062012 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.776098967 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.826788902 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.856646061 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857182026 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857224941 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857280970 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857316017 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857348919 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857381105 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857414007 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857429028 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857462883 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857462883 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857492924 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857495070 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857527018 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857558966 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857589960 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857620955 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857657909 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857690096 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857728004 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857728004 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857728004 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857737064 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857769966 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857799053 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857801914 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857834101 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857866049 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857913971 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857917070 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857963085 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.857971907 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.857991934 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858022928 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858053923 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858083963 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858084917 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858105898 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858118057 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858149052 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858180046 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858202934 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858211994 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858242989 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858243942 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858277082 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858311892 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858329058 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858361959 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858480930 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858513117 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858545065 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858577967 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858602047 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858611107 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858639956 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858872890 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858906031 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858937979 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858963013 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.858971119 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.858994961 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859002113 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859034061 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859065056 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859086037 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859097004 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859122038 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859128952 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859162092 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859194040 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859217882 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859225988 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859249115 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859256983 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859291077 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859344959 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859589100 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859621048 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859654903 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.859678030 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.859700918 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.863501072 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863552094 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863698006 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863746881 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863760948 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863899946 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863914013 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863929033 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863943100 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.863976955 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.863976955 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864063025 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864084005 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864098072 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864111900 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864125967 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864131927 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864140987 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864156008 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864181042 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864216089 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864264011 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864317894 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864342928 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864356995 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864372015 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864411116 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864444017 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864518881 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864573956 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864588022 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864600897 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864646912 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864741087 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864754915 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864768028 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864787102 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864800930 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864804029 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864814997 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864825964 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864830971 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.864861965 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.864891052 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865127087 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865140915 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865154982 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865169048 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865183115 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865196943 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865199089 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865211010 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865226030 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865236998 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865242004 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865253925 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865281105 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865535021 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865549088 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865562916 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865576982 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865593910 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865607023 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865608931 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865645885 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865776062 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865791082 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865804911 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865818977 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865833998 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865834951 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865848064 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.865858078 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.865906000 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.916132927 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:55.916188955 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:55.916321993 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:55.926063061 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:55.926085949 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:55.945373058 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945405960 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945420027 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945434093 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945446968 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945460081 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945475101 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945589066 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945602894 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945616961 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945667028 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.945667028 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.945709944 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.945718050 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945733070 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945790052 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.945863962 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945878029 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945892096 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945905924 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945919991 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945934057 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945936918 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.945947886 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945959091 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.945961952 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945976973 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.945977926 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946032047 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946655035 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946669102 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946681976 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946695089 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946708918 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946712971 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946722984 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946734905 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946736097 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946751118 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946753979 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946763992 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946778059 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946791887 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946795940 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946805000 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946820021 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946834087 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946840048 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946849108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.946887970 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.946917057 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.947637081 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947650909 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947663069 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947675943 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947689056 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947702885 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947706938 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.947716951 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947732925 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947746038 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947748899 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.947758913 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947768927 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.947772980 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947787046 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947808981 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.947824955 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948033094 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948162079 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948175907 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948189974 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948201895 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948215961 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948227882 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948250055 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948291063 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948316097 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948331118 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948343992 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948358059 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948371887 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948370934 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948386908 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948400021 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948402882 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948415041 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948427916 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948438883 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948441982 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.948465109 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.948482990 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949278116 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949291945 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949306011 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949320078 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949333906 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949347019 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949347973 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949361086 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949363947 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949374914 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949388027 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949388981 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949403048 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949415922 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949429989 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949429989 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949444056 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949457884 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949466944 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949470997 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949486971 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.949486971 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.949536085 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950042963 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950099945 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950249910 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950264931 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950278997 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950293064 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950305939 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950318098 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950320005 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950334072 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950337887 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950347900 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950361013 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950375080 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950381994 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950390100 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950402021 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950402975 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950417042 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950421095 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950431108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.950459957 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.950495005 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.951091051 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951106071 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951118946 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951133013 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951147079 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951160908 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951165915 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.951174974 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951189041 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951203108 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951208115 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.951217890 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951230049 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.951231956 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951246977 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:55.951281071 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:55.951307058 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.015585899 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.016351938 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.016391993 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.018030882 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.018316984 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.019658089 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.019759893 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.019776106 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.019941092 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.030313969 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030337095 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030353069 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030426979 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030487061 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030502081 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030515909 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030530930 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030556917 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030592918 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030810118 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030831099 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030846119 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030858994 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030872107 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030885935 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030885935 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030899048 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030906916 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030914068 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030927896 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.030935049 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030956984 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.030973911 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031296015 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031311989 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031459093 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031474113 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031487942 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031491041 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031501055 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031522989 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031537056 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031543016 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031549931 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031563997 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031563997 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031578064 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031591892 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031599045 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031605959 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031620026 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031621933 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.031652927 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.031694889 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.032242060 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032255888 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032269955 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032284021 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032298088 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032311916 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032325983 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032330036 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.032340050 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032368898 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.032396078 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.032574892 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032598019 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.032653093 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.047749043 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.047842026 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.047955990 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.048307896 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.048386097 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.065419912 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.065439939 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.120004892 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.120089054 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.120381117 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.120506048 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.120537996 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.122868061 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.148252010 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.148403883 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.148478985 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.148591042 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.148628950 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.148694038 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.148818016 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.148868084 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.148969889 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.149045944 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.149074078 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.149116039 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.149185896 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.149216890 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.149378061 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.149441957 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.149472952 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.149547100 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.237816095 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.238022089 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.238096952 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.238127947 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.238630056 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.238706112 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.238715887 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.238847971 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.238900900 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.238909006 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239087105 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239141941 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.239150047 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239280939 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239331961 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.239341021 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239490032 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239578962 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.239587069 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239743948 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.239804983 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.240181923 CEST	49738	443	192.168.2.4	104.17.25.14
Oct 10, 2024 22:01:56.240196943 CEST	443	49738	104.17.25.14	192.168.2.4
Oct 10, 2024 22:01:56.336487055 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.336796999 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.336819887 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.338475943 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.338577986 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.339824915 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.340029001 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.340037107 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.340060949 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.389374018 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.389404058 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.412358999 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:56.412698984 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:56.412730932 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:56.414383888 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:56.414469957 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:56.422405958 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:56.422646046 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:56.436072111 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.468841076 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:56.468868971 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:01:56.511890888 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:01:56.581243992 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.604751110 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:56.604835033 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:56.610630035 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:56.610658884 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:56.611140966 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:56.623948097 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.631253004 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.631270885 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.631294966 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.631304979 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.631319046 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.631336927 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.631349087 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.631376982 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.631434917 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.632394075 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.632814884 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.632875919 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.634546995 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.634623051 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.642381907 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.642472982 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.642580032 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.642610073 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.657797098 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:56.667980909 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.668004036 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.668056965 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.668088913 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.668148041 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.670957088 CEST	49739	443	192.168.2.4	192.229.133.221
Oct 10, 2024 22:01:56.670978069 CEST	443	49739	192.229.133.221	192.168.2.4
Oct 10, 2024 22:01:56.685473919 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.800599098 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.800796032 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.800880909 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.867913961 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:56.881724119 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.883126974 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.883729935 CEST	49743	443	192.168.2.4	108.178.43.142
Oct 10, 2024 22:01:56.883796930 CEST	443	49743	108.178.43.142	192.168.2.4
Oct 10, 2024 22:01:56.885056019 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.885085106 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.886588097 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.886646032 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.886723042 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.890008926 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.890101910 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.892337084 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.892358065 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:56.911456108 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:56.935451984 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:56.987879038 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:56.989902020 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:56.996653080 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.066770077 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.066839933 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.066889048 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.067001104 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.067014933 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.067037106 CEST	49741	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.067042112 CEST	443	49741	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.092502117 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.092520952 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.092535973 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.092596054 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:57.092639923 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.092828035 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:57.143050909 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:57.143125057 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:57.143193960 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:57.143317938 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:57.143317938 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:57.209630966 CEST	49742	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:57.209697008 CEST	443	49742	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:57.234215021 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:57.234258890 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:57.234318972 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:57.234652996 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:57.234672070 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:57.238126993 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.238215923 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.238284111 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.239021063 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.239053011 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.240123034 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.245768070 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.245831013 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.246083021 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.251631975 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.292146921 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:57.292260885 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:57.297295094 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297310114 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297321081 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297350883 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297364950 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297370911 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:57.297375917 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297388077 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297399998 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297410011 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297430038 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297441959 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.297473907 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.302252054 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.302685022 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.443480968 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:01:57.486453056 CEST	49749	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.491597891 CEST	8443	49749	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.491858959 CEST	49749	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.492145061 CEST	49749	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.492386103 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:01:57.497106075 CEST	8443	49749	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.719852924 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.719916105 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.720005989 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.738648891 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.739013910 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.739053011 CEST	49749	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.739244938 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.739279032 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.743622065 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.743963003 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.744085073 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.744234085 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.784193039 CEST	8443	49749	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.832283974 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.844391108 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.844465971 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.844502926 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.844537020 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.844583035 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.844609022 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.844644070 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.844693899 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.855010986 CEST	8443	49749	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.856785059 CEST	49749	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.880868912 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:01:57.885855913 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:01:57.887350082 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:57.887425900 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:57.887496948 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:57.890383005 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:57.890417099 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:57.922272921 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.922373056 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.943706036 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.943746090 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.944545984 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:57.945651054 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:57.987426043 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:58.037344933 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.037646055 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.037667990 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.041208029 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.041275978 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.041629076 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.041769028 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.041793108 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.092103958 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.092123032 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.139111996 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.219402075 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:58.219475031 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:58.219573975 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:58.220233917 CEST	49746	443	192.168.2.4	95.100.63.156
Oct 10, 2024 22:01:58.220253944 CEST	443	49746	95.100.63.156	192.168.2.4
Oct 10, 2024 22:01:58.302493095 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.302599907 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.302661896 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.302689075 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.302742004 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.302748919 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.302803993 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.303477049 CEST	49745	443	192.168.2.4	152.199.21.175
Oct 10, 2024 22:01:58.303503990 CEST	443	49745	152.199.21.175	192.168.2.4
Oct 10, 2024 22:01:58.383977890 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.384198904 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.384227037 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.385870934 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.385938883 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.386904001 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.386997938 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.387067080 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.387079954 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.435862064 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.514054060 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.514707088 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.514934063 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.520602942 CEST	49750	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.520632982 CEST	443	49750	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.521260023 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.521301985 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.521358013 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.522068024 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.522079945 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.994546890 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.994918108 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.994956970 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.995588064 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.997571945 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:58.997643948 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:58.997948885 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:59.043415070 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:59.122092009 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:59.122654915 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:01:59.122756958 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:59.122980118 CEST	49753	443	192.168.2.4	35.190.80.1
Oct 10, 2024 22:01:59.123008966 CEST	443	49753	35.190.80.1	192.168.2.4
Oct 10, 2024 22:02:05.442030907 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:05.442115068 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:05.442631006 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:05.443628073 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:05.443701982 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:06.142411947 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:06.142507076 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:06.145895004 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:06.145921946 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:06.146323919 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:06.186914921 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:06.310445070 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:06.310580969 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:06.310658932 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:06.782054901 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:06.823420048 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007623911 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007672071 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007693052 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007735014 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007755041 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.007806063 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007834911 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007863045 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.007863045 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.007865906 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007886887 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.007900953 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.007927895 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.007952929 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.007965088 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.008107901 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.008590937 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.441170931 CEST	49740	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:07.441206932 CEST	443	49740	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:07.545578003 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.545614958 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:07.545635939 CEST	49758	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:07.545648098 CEST	443	49758	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:11.248405933 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.248507023 CEST	443	49766	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.248508930 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.248533964 CEST	443	49767	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.248583078 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.248594999 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.248928070 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.248944044 CEST	443	49767	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.249110937 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.249147892 CEST	443	49766	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.733624935 CEST	443	49766	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.733989000 CEST	443	49767	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.734394073 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.734407902 CEST	443	49767	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.734497070 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.734538078 CEST	443	49766	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.736051083 CEST	443	49767	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.736190081 CEST	443	49766	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.736205101 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.736247063 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.737035990 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.737035990 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.737123013 CEST	443	49767	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.737179041 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.737179041 CEST	49767	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.737600088 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.737647057 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.737705946 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.738104105 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.738121033 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.738692999 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.738735914 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.738755941 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.738794088 CEST	443	49766	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.738845110 CEST	49766	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.739015102 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.739104033 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:11.739173889 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.739322901 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:11.739358902 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.203999043 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.204314947 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.204354048 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.205980062 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.206058979 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.207196951 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.207290888 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.207560062 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.207576990 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.211266041 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.211509943 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.211540937 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.213193893 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.213268995 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.214066982 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.214148998 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.214482069 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.214490891 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.248106956 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.263813019 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.814064026 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.814177990 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.814268112 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.814371109 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.814621925 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.814683914 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.815614939 CEST	49769	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.815651894 CEST	443	49769	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:12.815903902 CEST	49768	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:02:12.815922976 CEST	443	49768	104.21.81.229	192.168.2.4
Oct 10, 2024 22:02:13.225296021 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.225393057 CEST	443	49770	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.225477934 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.264348984 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.264430046 CEST	443	49770	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.736975908 CEST	443	49770	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.737448931 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.737513065 CEST	443	49770	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.738951921 CEST	443	49770	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.739026070 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.739319086 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.739356995 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.739429951 CEST	443	49770	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.739442110 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.739481926 CEST	49770	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.739732981 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.739765882 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:13.740001917 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.740001917 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:13.740031958 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.236491919 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.237021923 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.237040997 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.241094112 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.241172075 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.241646051 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.241835117 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.241842985 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.283422947 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.295108080 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.295114994 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.342000961 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.525862932 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.526139975 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.526192904 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.527116060 CEST	49771	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.527127981 CEST	443	49771	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.528043032 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.528110027 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:14.528178930 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.528963089 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:14.528999090 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.055846930 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.056154966 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.056190968 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.057643890 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.057713985 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058011055 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058028936 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058092117 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.058190107 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058190107 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058203936 CEST	443	49772	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.058254957 CEST	49772	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058470964 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058506012 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.058579922 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058747053 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.058758974 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.537935019 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.551621914 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.551637888 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.552781105 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.564383984 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.564553022 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.569789886 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.611401081 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.844882011 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.845108986 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:15.845215082 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.846380949 CEST	49773	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:02:15.846391916 CEST	443	49773	172.67.165.105	192.168.2.4
Oct 10, 2024 22:02:42.451771021 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:02:42.678461075 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:02:42.889276028 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:02:42.894309044 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:02:43.930032969 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:43.930134058 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:43.930218935 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:43.930546999 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:43.930589914 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.639693022 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.639883995 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.643383026 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.643415928 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.643835068 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.651324034 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.691481113 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.901609898 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.901685953 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.901730061 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.901801109 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.901885033 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.901927948 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.901951075 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.902606010 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.902658939 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.902694941 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.902717113 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.902741909 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.902784109 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.902851105 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.907510996 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.907510996 CEST	49774	443	192.168.2.4	172.202.163.200
Oct 10, 2024 22:02:44.907548904 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:44.907572031 CEST	443	49774	172.202.163.200	192.168.2.4
Oct 10, 2024 22:02:47.588037014 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:47.588069916 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:47.588484049 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:47.591423035 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:47.591434002 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.244895935 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.245134115 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.246444941 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.246449947 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.246668100 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.254223108 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.299401045 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.395366907 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.395380020 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.395421028 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.395457983 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.395468950 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.395499945 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.395523071 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.478089094 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.478106976 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.478193045 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.478202105 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.478287935 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.480093002 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.480109930 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.480159998 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.480166912 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.480222940 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.566760063 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.566776037 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.566838026 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.566848040 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.566890955 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.567867041 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.567881107 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.567936897 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.567943096 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.567987919 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.569056988 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.569068909 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.569112062 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.569116116 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.569206953 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.570344925 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.570360899 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.570413113 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.570419073 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.570499897 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.654511929 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.654525995 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.654598951 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.654608965 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.654645920 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.655924082 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.655937910 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.655999899 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.656007051 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.656034946 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.656049967 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.657166958 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.657181025 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.657222033 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.657228947 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.657252073 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.657274961 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.658498049 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.658513069 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.658557892 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.658564091 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.658595085 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.659339905 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.659354925 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.659410954 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.659415960 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.659440994 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.659457922 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.660811901 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.660825014 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.660872936 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.660876989 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.660909891 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.661173105 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.661261082 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.661267996 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.661298037 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.667206049 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.667220116 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.667229891 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.667233944 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.716666937 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.716756105 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.716846943 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.720630884 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.720670938 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.720725060 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.720959902 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.720967054 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.721008062 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.721345901 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.721379042 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.722958088 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.722982883 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.723040104 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.723272085 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.723294020 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.723561049 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.723577023 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.723634005 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.723648071 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.725176096 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.725199938 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:48.725275040 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.725414991 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:48.725426912 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.374771118 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.375322104 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.375341892 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.376209974 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.376223087 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.377058983 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.377826929 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.377892017 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.378551960 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.378568888 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.382102966 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.382446051 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.382457972 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.383117914 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.383124113 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.385237932 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.385576963 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.385611057 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.386296988 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.386308908 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.389959097 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.390314102 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.390325069 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.390919924 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.390923977 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.478594065 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.478611946 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.478667974 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.478679895 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.478724957 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.478751898 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.478781939 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.478852034 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.479096889 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.479115009 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.479126930 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.479134083 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.479671001 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.479695082 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.479866982 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.479929924 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.480005980 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.480021000 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.480032921 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.480082989 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.481137037 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.481137037 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.481173038 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.481198072 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.484735966 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.484833956 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.484942913 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.484945059 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.485086918 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.485177994 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.486051083 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.486063004 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.486155033 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.486392975 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.486413002 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.486598969 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.486612082 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.486624956 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.486630917 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.489171982 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.489187002 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.489420891 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.489465952 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.489546061 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.489572048 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.489587069 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.489645958 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.490206957 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.490219116 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.490250111 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.490263939 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.491153955 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.491180897 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.491257906 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.492575884 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.492590904 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.494421959 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.494497061 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.494570971 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.494716883 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.494756937 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.494839907 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.494848013 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.494883060 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.495126009 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.495136023 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.495163918 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.495168924 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.499356031 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.499392033 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:49.499464035 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.499682903 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:49.499696970 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.123256922 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.123809099 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.123838902 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.124418974 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.124423981 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.125432014 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.126239061 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.126245975 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.127573013 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.127577066 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.147030115 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.152846098 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.152896881 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.153753042 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.153767109 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.163857937 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.164237022 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.182586908 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.182607889 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.183907032 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.183912992 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.189007998 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.189023018 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.189630032 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.189635038 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.222697020 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.222731113 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.222784996 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.229461908 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.229562044 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.229751110 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.230904102 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.230926037 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.230937004 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.230942965 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.240031958 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.240041018 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.240050077 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.240052938 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.255373955 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.255740881 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.255815029 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.257860899 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.257903099 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.257930994 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.257946968 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.282872915 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.283015966 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.283065081 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.288531065 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.288570881 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.288743973 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.316318989 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.316329002 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.316380024 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.316385031 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.328682899 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.328697920 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.328741074 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.328746080 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.372905970 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.372920990 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.376965046 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.417201042 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.417282104 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.417365074 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.420917988 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.421027899 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.421123028 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.429649115 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.429653883 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.429666042 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.429677963 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.429743052 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.429858923 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.429872036 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.450315952 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.450318098 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.450354099 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.450361013 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.495543003 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.495562077 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:50.495915890 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.528919935 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:50.528933048 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.094346046 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.095330000 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.095330000 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.095350027 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.095365047 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.097063065 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.097749949 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.097749949 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.097768068 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.097789049 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.114157915 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.114485025 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.114532948 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.114816904 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.114830017 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.136003017 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.136631966 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.136631966 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.136692047 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.136734009 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.179461002 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.180087090 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.180087090 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.180116892 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.180140972 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.197566032 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.197624922 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.197803020 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.197803020 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.197922945 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.197936058 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.200148106 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.200217962 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.200362921 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.200454950 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.200475931 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.204482079 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.204555988 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.204637051 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.204674006 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.204674006 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.204684019 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.204691887 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.206630945 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.206727028 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.206902981 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.206975937 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.207005978 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.217617035 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.217684031 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.217802048 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.217802048 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.218046904 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.218079090 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.219630957 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.219660997 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.219783068 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.219882965 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.219894886 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.240138054 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.240288973 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.240381002 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.240381002 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.240381956 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.242127895 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.242137909 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.242214918 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.242304087 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.242311954 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.281524897 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.281565905 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.281755924 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.281755924 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.282042980 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.282059908 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.283576012 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.283669949 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.283878088 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.283878088 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.283968925 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.545977116 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.546029091 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.905917883 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.906497955 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.906534910 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.906976938 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.906990051 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.913656950 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.914107084 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.914167881 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.914325953 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.914340973 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.922527075 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.922827959 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.922840118 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:51.923156023 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:51.923161030 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.170756102 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.170789003 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.170903921 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.170918941 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.170977116 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.171072006 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.171267033 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.171267033 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.171314955 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.171339989 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.171341896 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.171384096 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.173619986 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.174032927 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174127102 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.174158096 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174180031 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.174206972 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174264908 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174343109 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174380064 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.174510002 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174550056 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.174577951 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174602032 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.174967051 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.174978018 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.177251101 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.177613020 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.177627087 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.178097010 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.178101063 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.260732889 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.260782003 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.260828018 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.260916948 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.260929108 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.260938883 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.260943890 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.263248920 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.263273954 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.263360023 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.263472080 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.263475895 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.279262066 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.279447079 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.279491901 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.279524088 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.279531956 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.279540062 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.279542923 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.281405926 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.281425953 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.281440973 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.281491995 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.281502008 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.281593084 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.281672955 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.281672955 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.281708002 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.281717062 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.281718016 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.281747103 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.283488989 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.283536911 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.283669949 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.283796072 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.283826113 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.866563082 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.867533922 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.867535114 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.867573023 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.867609024 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.954967022 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.955420971 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.955457926 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.955845118 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.955857038 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.969008923 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.969072104 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.969294071 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.969294071 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.969383955 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.969419003 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.969444036 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.969696045 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.969717979 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.971425056 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.971430063 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.971796989 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.971848011 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.971982956 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.972071886 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.972084045 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.983172894 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.983627081 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.983640909 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:52.983946085 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:52.983949900 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.101561069 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.101614952 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.101891041 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.101891041 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.101891994 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.102727890 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.102776051 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.102907896 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.103055954 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.103055954 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.103080034 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.103089094 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.103918076 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.104063988 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.105161905 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105197906 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.105241060 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105241060 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105264902 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.105297089 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105345964 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105353117 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.105369091 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105369091 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105381012 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.105633020 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105637074 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.105643034 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.105654001 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.107371092 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.107424974 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.107631922 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.107631922 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.107670069 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.405358076 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.405400038 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.491173983 CEST	61026	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:53.496071100 CEST	53	61026	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:53.496140003 CEST	61026	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:53.496170044 CEST	61026	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:53.501137018 CEST	53	61026	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:53.682619095 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.683121920 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.683180094 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.683548927 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.683563948 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.775863886 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.776355982 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.776386976 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.776849985 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.776855946 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.782394886 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.783420086 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.783433914 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.783617973 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.783622026 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.784498930 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.784532070 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.784596920 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.784778118 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.784825087 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.784852028 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.784868002 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.787628889 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.787728071 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.787879944 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.788029909 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.788049936 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.790138006 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.790443897 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.790486097 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.790786982 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.790798903 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.878617048 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.878648996 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.878715992 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.878998041 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.879017115 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.879054070 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.879060984 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.881936073 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.881983995 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.882044077 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.882237911 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.882257938 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.883074045 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.883219957 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.883294106 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.883347034 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.883363962 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.883377075 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.883390903 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.885497093 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.885581017 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.885674953 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.885798931 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.885838032 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.905401945 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.905451059 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.905601978 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.905653954 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.905654907 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.905687094 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.905710936 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.907810926 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.907834053 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.907900095 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.908054113 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:53.908078909 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:53.948928118 CEST	53	61026	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:53.949794054 CEST	61026	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:53.955173016 CEST	53	61026	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:53.955307961 CEST	61026	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:54.453521967 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.455703974 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.455704927 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.455734968 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.455756903 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.521240950 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.522037983 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.522070885 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.522841930 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.522862911 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.634238005 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.634917974 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.635296106 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.635318995 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.636466980 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.636466980 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.636482000 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.636513948 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.638195038 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.638205051 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.642028093 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.642065048 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.642250061 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.643667936 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.643697023 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.643697023 CEST	61027	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.643713951 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.643724918 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.643737078 CEST	443	61027	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.643830061 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.644119978 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.644119978 CEST	61028	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.644140005 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.644150972 CEST	443	61028	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.651168108 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.651168108 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.651241064 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.651277065 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.651362896 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.651362896 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.651770115 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.651770115 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.651810884 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.651851892 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.785888910 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.785914898 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.786031008 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.786197901 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.786197901 CEST	61030	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.786228895 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.786252975 CEST	443	61030	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.786320925 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.786451101 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.786787987 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.787586927 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.787607908 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.787750959 CEST	61029	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.787767887 CEST	443	61029	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.791416883 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.791435003 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.791471958 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.791508913 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.791651964 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.791764021 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.791768074 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.791796923 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.791939020 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.791954994 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.877320051 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.878561020 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.878561020 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.878591061 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.878602028 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.978177071 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.978250980 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.978729963 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.979048967 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.979065895 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.979091883 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.979099989 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.982969046 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.983061075 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:54.983143091 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.983661890 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:54.983695984 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.365686893 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.366164923 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.366230011 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.366620064 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.366635084 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.376266956 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.377070904 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.377070904 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.377098083 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.377134085 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.460369110 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.460805893 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.460824966 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.461209059 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.461215019 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.466238022 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.466584921 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.466594934 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.466923952 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.466928005 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.467144012 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.467191935 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.467291117 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.467446089 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.467483044 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.467513084 CEST	61033	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.467528105 CEST	443	61033	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.470148087 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.470213890 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.470297098 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.470432043 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.470460892 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.479182959 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.479324102 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.479399920 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.479458094 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.479475021 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.479502916 CEST	61034	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.479513884 CEST	443	61034	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.481714964 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.481734991 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.481811047 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.481939077 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.481952906 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.560048103 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.560082912 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.560129881 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.560359955 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.560372114 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.560384035 CEST	61036	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.560389996 CEST	443	61036	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.563216925 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.563302040 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.563391924 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.563532114 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.563568115 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.569591045 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.569736004 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.569823027 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.569823027 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.570056915 CEST	61035	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.570065022 CEST	443	61035	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.571558952 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.571600914 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.571727037 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.571824074 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.571830988 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.645210028 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.685741901 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.700891018 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.700908899 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.702476978 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.702487946 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.798892975 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.798963070 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.799012899 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.801011086 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:55.801028967 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:55.801081896 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:55.801695108 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:55.801707029 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:55.806376934 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.806410074 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.806487083 CEST	61037	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.806504011 CEST	443	61037	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.824322939 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.824409008 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:55.824491978 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.825053930 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:55.825088024 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.368416071 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.368966103 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.369046926 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.369096041 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.369270086 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.369709015 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.369721889 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.369999886 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.370017052 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.370913982 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.370918036 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.371611118 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.371670008 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.371997118 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.372009993 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.373902082 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.375830889 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.375843048 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.376717091 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.376724958 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.458440065 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:56.472181082 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.472218990 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.472476959 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.472805023 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.472847939 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.475008965 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.475167036 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.475199938 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.475414991 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.478595972 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.478648901 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.479526043 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.500797987 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.500871897 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.500914097 CEST	61040	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.500932932 CEST	443	61040	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.501072884 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:56.501123905 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:56.501532078 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:56.502238035 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.502238035 CEST	61038	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.502279043 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.502302885 CEST	443	61038	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.502718925 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.502718925 CEST	61039	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.502738953 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.502749920 CEST	443	61039	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.505675077 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.505675077 CEST	61041	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.505692959 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.505702019 CEST	443	61041	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.515403986 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:56.515515089 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:02:56.521471024 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.521501064 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.522881031 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.522943974 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.522999048 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.523116112 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.523747921 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.523791075 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.524139881 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.524152040 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.525341988 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.525391102 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.525537014 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.526536942 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.526546001 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.526626110 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.526844025 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.526853085 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.526853085 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.526905060 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.563424110 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:02:56.566854000 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.588793039 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.588876009 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.590445042 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.590460062 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.694544077 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.694705009 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.694964886 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.694964886 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.694966078 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.697305918 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.697405100 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.697601080 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.697691917 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.697715998 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:56.998457909 CEST	61043	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:56.998521090 CEST	443	61043	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.053008080 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.053375959 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.053664923 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.053723097 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.053736925 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.053761959 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.054258108 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.054275036 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.054318905 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.054325104 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.060236931 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.060576916 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.060594082 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.061013937 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.061018944 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.066056013 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.066380978 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.066416025 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.066795111 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.066807032 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.074337006 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.074671030 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.074733019 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.075076103 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.075084925 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.155566931 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.155615091 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.155658960 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.156074047 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.156090975 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.156100988 CEST	61044	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.156105995 CEST	443	61044	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.157140970 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.157186031 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.157243013 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.157913923 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.157962084 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.157979965 CEST	61046	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.157996893 CEST	443	61046	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.160947084 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.160979033 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.161035061 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.161035061 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.161056042 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.161149025 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.161160946 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.161185026 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.161331892 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.161339998 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.167423010 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.167470932 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.167512894 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.167633057 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.167643070 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.167656898 CEST	61047	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.167660952 CEST	443	61047	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.168114901 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.168268919 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.168322086 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.168365002 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.168401957 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.168426991 CEST	61048	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.168442965 CEST	443	61048	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.170352936 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.170389891 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.170392036 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.170443058 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.170444965 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.170495033 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.170617104 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.170634031 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.170650959 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.170680046 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.179032087 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.179183960 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.179229021 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.179277897 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.179284096 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.179301023 CEST	61045	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.179306030 CEST	443	61045	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.181258917 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.181279898 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.181338072 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.181624889 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.181641102 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.875063896 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.875914097 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.875960112 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.875971079 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.876012087 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.876015902 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.876712084 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.876712084 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.876718044 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.876729965 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.877597094 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.878387928 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.878388882 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.878462076 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.878492117 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.882008076 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.882299900 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.882343054 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.882627964 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.882635117 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.888694048 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.889349937 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.889349937 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.889358044 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.889369011 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.974493980 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.974530935 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.976042986 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.976075888 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.976075888 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.976217985 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.976217985 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.976228952 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.976259947 CEST	61049	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.976264000 CEST	443	61049	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.977536917 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.977540016 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.977574110 CEST	61050	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.977576971 CEST	443	61050	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.978615046 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.978660107 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.978754997 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.979048967 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.979082108 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.979123116 CEST	61052	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.979136944 CEST	443	61052	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.980631113 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.980650902 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.980745077 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.980887890 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.980894089 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.980930090 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.980935097 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.980992079 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.980998993 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.981085062 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.981095076 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.981127024 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.981134892 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.981142998 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.981164932 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.982861042 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.983012915 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.983151913 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.983200073 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.983201027 CEST	61051	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.983218908 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.983231068 CEST	443	61051	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.985615015 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.985637903 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.985781908 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.985932112 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.985943079 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.992639065 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.992788076 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.992935896 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.992935896 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.993232965 CEST	61053	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.993238926 CEST	443	61053	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.994565964 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.994571924 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:58.994750977 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.994815111 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:58.994820118 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.617397070 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.617911100 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.617973089 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.618338108 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.618350029 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.619770050 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.620150089 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.620183945 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.620563030 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.620568991 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.620812893 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.621088028 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.621105909 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.621488094 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.621496916 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.678709984 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.679280996 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.679296017 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.679769993 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.679775000 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.685396910 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.685693026 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.685698986 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.686042070 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.686044931 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.737719059 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.737757921 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.737838984 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.737879038 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.737896919 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.737955093 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.737957954 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.737996101 CEST	61054	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.738004923 CEST	443	61054	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.738006115 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.738071918 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.738076925 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.738095045 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.738104105 CEST	61056	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.738109112 CEST	443	61056	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.738996983 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.738996983 CEST	61055	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.739032984 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.739054918 CEST	443	61055	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.741369009 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.741374969 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.741389036 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.741420031 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.741441965 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.741506100 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.741589069 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.741594076 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.741797924 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.741820097 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.742129087 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.742213964 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.742346048 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.742491007 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.742516994 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.800447941 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.800595045 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.800651073 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.800676107 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.800684929 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.800693989 CEST	61057	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.800698042 CEST	443	61057	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.802643061 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.802665949 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.802922010 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.802922010 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.803059101 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.884535074 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.884746075 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.884797096 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.884851933 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.884851933 CEST	61058	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.884857893 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.884864092 CEST	443	61058	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.886534929 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.886570930 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:02:59.886787891 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.886912107 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:02:59.886919022 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.170284033 CEST	49723	80	192.168.2.4	88.221.110.91
Oct 10, 2024 22:03:00.170490980 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 10, 2024 22:03:00.176095963 CEST	80	49723	88.221.110.91	192.168.2.4
Oct 10, 2024 22:03:00.176388979 CEST	49723	80	192.168.2.4	88.221.110.91
Oct 10, 2024 22:03:00.176630974 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 10, 2024 22:03:00.176696062 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 10, 2024 22:03:00.407804966 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.408780098 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.408780098 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.408806086 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.408818007 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.426517963 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.426973104 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.427035093 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.427409887 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.427426100 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.444854975 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.445178032 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.445218086 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.445513964 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.445528984 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.451416016 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.451857090 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.451945066 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.452095032 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.452110052 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.508888960 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.508920908 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.508985996 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.509198904 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.509221077 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.509249926 CEST	61060	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.509254932 CEST	443	61060	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.512346029 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.512365103 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.512556076 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.512691975 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.512700081 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.534173012 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.534210920 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.534739017 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.534739971 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.534979105 CEST	61061	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.535017967 CEST	443	61061	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.537040949 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.537079096 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.537139893 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.537281990 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.537297010 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.547096014 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.547137022 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.547302008 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.547302008 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.547594070 CEST	61059	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.547658920 CEST	443	61059	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.548764944 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.549403906 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.549405098 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.549411058 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.549421072 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.549515009 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.549623966 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.549637079 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.550024986 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.550031900 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.557003021 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.557171106 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.557555914 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.557557106 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.557557106 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.559240103 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.559269905 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.559325933 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.559547901 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.559559107 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.649152040 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.649260998 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.649368048 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.649548054 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.649575949 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.649749041 CEST	61063	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.649756908 CEST	443	61063	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.652039051 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.652062893 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.652368069 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.652486086 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.652491093 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:00.858021021 CEST	61062	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:00.858083963 CEST	443	61062	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.312077045 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.313184977 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.313184977 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.313232899 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.313275099 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.317424059 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.318068981 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.318069935 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.318083048 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.318093061 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.322705984 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.322969913 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.322987080 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.323275089 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.323286057 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.323350906 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.323699951 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.323717117 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.323962927 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.323967934 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.455935001 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.456068039 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.456140041 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.456370115 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.456378937 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.456387043 CEST	61068	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.456389904 CEST	443	61068	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.458857059 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.458914995 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.458992958 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.459191084 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.459255934 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.459625006 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.459769011 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.459825993 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.459897995 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.459897995 CEST	61067	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.459908009 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.459916115 CEST	443	61067	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.461061954 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.461098909 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.461201906 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.461256027 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.461287022 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.461321115 CEST	61066	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.461337090 CEST	443	61066	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.462033987 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.462044954 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.462356091 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.462461948 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.462475061 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.462502003 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.462548018 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.462613106 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.462707996 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.462707996 CEST	61065	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.462723970 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.462743998 CEST	443	61065	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.463521957 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.463535070 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.463764906 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.463885069 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.463895082 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.464364052 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.464435101 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:01.464529991 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.464629889 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:01.464662075 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.116125107 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.116636038 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.116676092 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.117100954 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.117113113 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.125055075 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.125381947 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.125397921 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.125757933 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.125768900 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.126946926 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.127264023 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.127345085 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.127569914 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.127584934 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.144347906 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.144689083 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.144706011 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.145024061 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.145028114 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.218667984 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.218810081 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.218919992 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.218975067 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.219002962 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.219044924 CEST	61069	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.219059944 CEST	443	61069	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.221534967 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.221568108 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.221652985 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.221812010 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.221829891 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.227073908 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.227108002 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.227180004 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.227297068 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.227308989 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.227354050 CEST	61070	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.227365017 CEST	443	61070	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.229192972 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.229202032 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.229300022 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.229306936 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.229440928 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.229480028 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.229491949 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.229640007 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.229640961 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.229640961 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.231254101 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.231316090 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.231394053 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.231528997 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.231561899 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.249077082 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.249124050 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.249171972 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.249347925 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.249356031 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.249386072 CEST	61071	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.249391079 CEST	443	61071	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.251106024 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.251127958 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.251274109 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.251405954 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.251418114 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.529663086 CEST	61072	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.529726028 CEST	443	61072	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.913069010 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.913784027 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.913799047 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.913938046 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.914009094 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.914021969 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.914443970 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.914484024 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.914491892 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.914731026 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.914746046 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.914791107 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.914794922 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:02.915091038 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:02.915096998 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.050717115 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.050843954 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.051125050 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.051147938 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.051147938 CEST	61073	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.051165104 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.051172972 CEST	443	61073	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.053831100 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.053925991 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.054069996 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.054182053 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.054213047 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.066222906 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.066245079 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.066287041 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.066324949 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.066483021 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.066529036 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.066529989 CEST	61076	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.066539049 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.066546917 CEST	443	61076	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.068917036 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.068950891 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.069206953 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.069206953 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.069267035 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.073008060 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.073049068 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.073191881 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.073249102 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.073249102 CEST	61074	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.073255062 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.073257923 CEST	443	61074	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.075419903 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.075433016 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.075546980 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.075948000 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.075961113 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.580537081 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.581124067 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.581183910 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.581569910 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.581584930 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.708687067 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.708833933 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.708899021 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.709060907 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.709060907 CEST	61075	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.709105015 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.709134102 CEST	443	61075	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.711863041 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.711920023 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.711992979 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.712213039 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.712229967 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.786668062 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.787266016 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.787278891 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.787827015 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.787831068 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.797457933 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.803919077 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.803966045 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.804550886 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.804563046 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.828314066 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.828666925 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.828684092 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.829055071 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.829066038 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.904639959 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.904777050 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.904846907 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.904947996 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.904979944 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.905006886 CEST	61077	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.905020952 CEST	443	61077	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.907773018 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.907802105 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.907862902 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.907870054 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.907913923 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.908123016 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.908128977 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.908150911 CEST	61079	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.908154011 CEST	443	61079	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.908485889 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.908519983 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.908582926 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.908730984 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.908746958 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.910378933 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.910388947 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:03.910448074 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.910583973 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:03.910595894 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.012727976 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.012763977 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.012897015 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.012944937 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.012944937 CEST	61078	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.012969971 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.012993097 CEST	443	61078	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.015431881 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.015511036 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.015580893 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.015706062 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.015722990 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.422600985 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.423600912 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.423600912 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.423651934 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.423675060 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.522954941 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.523011923 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.523252964 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.523277998 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.523377895 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.523405075 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.523406029 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.523457050 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.523494959 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.523494959 CEST	61080	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.523511887 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.523536921 CEST	443	61080	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.525964975 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.526015043 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.526120901 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.526276112 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.526290894 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.632838011 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.633739948 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.633739948 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.633785009 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.633807898 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.635694027 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.636300087 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.636300087 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.636329889 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.636351109 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.735709906 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.735749006 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.735796928 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.735918045 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.736046076 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.736046076 CEST	61081	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.736071110 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.736083984 CEST	443	61081	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.736576080 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.737117052 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.737140894 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.737327099 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.737332106 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.738491058 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.738509893 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.738598108 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.738838911 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.738850117 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.739840031 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.740586996 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.740703106 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.740703106 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.740811110 CEST	61082	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.740822077 CEST	443	61082	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.742693901 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.742737055 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.742840052 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.742947102 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.742969036 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.837054014 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.837093115 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.837178946 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.837636948 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.837636948 CEST	61083	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.837671041 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.837693930 CEST	443	61083	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.840960979 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.841011047 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:04.841115952 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.841276884 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:04.841286898 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.220484972 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.220484972 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.220499039 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.220505953 CEST	443	61090	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.220937014 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.220937014 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.221411943 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.221411943 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.221431017 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.221441984 CEST	443	61090	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.245137930 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.246140957 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.246141911 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.246174097 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.246197939 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.345802069 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.345948935 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.346188068 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.346188068 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.346188068 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.348659039 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.348689079 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.348896027 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.348929882 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.348938942 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.433635950 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.434954882 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.434954882 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.434967041 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.434973955 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.435081005 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.435379982 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.435420990 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.435841084 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.435853004 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.561330080 CEST	61084	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.561362982 CEST	443	61084	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.739514112 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.739584923 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.739775896 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.739799023 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.740428925 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.740531921 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.740539074 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.740556955 CEST	61086	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.740561008 CEST	443	61086	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.740564108 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.740673065 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.741096973 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.741131067 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.741144896 CEST	61087	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.741153002 CEST	443	61087	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.742207050 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.742244005 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.742712975 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.742733955 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.744189978 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.744262934 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.744309902 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.744350910 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.744385958 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.744523048 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.744549036 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.744559050 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.744692087 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.744724989 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.747713089 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.747916937 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.747922897 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.748764992 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.748851061 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749202967 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749253035 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.749254942 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749254942 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749373913 CEST	443	61089	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.749444008 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749461889 CEST	61089	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749469995 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749494076 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.749562025 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749725103 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.749747992 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.752415895 CEST	443	61090	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.752580881 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.752585888 CEST	443	61090	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.753452063 CEST	443	61090	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.753771067 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.753772974 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.753772974 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.753819942 CEST	443	61090	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.753845930 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.753865957 CEST	61090	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.753979921 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.754005909 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.754112005 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.754257917 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:05.754285097 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:05.848644972 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.848685026 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.848747015 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.849066973 CEST	61088	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.849095106 CEST	443	61088	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.851790905 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.851814985 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:05.851890087 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.852123976 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:05.852134943 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.026175022 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.026709080 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.026737928 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.027133942 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.027147055 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.148519039 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.149008036 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.149019957 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.149521112 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.149523973 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.180392981 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.180532932 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.180634975 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.180742025 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.180768013 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.180782080 CEST	61091	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.180788040 CEST	443	61091	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.183196068 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.183235884 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.183321953 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.183442116 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.183455944 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.312139988 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.312417984 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.312448025 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.313184977 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.313270092 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.313602924 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.313656092 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.313818932 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.313833952 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.321062088 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.321243048 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.321291924 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.322032928 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.322099924 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.322359085 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.322419882 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.322469950 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.339718103 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.339764118 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.339932919 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.340023041 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.340038061 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.340084076 CEST	61064	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.340087891 CEST	443	61064	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.342715979 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.342787981 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.342920065 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.343087912 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.343106985 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.358206034 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.363421917 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.373838902 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.373855114 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.377810955 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:06.377892017 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:06.377957106 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:06.420830965 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.452696085 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.453069925 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.453089952 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.453489065 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.453499079 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.506423950 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.507441044 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.507441998 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.507476091 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.507514000 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.554207087 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.554352045 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.554653883 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.554653883 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.555126905 CEST	61093	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.555149078 CEST	443	61093	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.557694912 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.557708025 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.557908058 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.557908058 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.557926893 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.599765062 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.600248098 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.600255013 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.600768089 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.600770950 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.613413095 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.613483906 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.613569021 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.613770962 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.613809109 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.613847971 CEST	61092	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.613862991 CEST	443	61092	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.616508961 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.616594076 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.616683960 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.617791891 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.617825985 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.634407997 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.634475946 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.634778023 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.635864019 CEST	61095	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.635879993 CEST	443	61095	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.636485100 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.636554003 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.637008905 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.637609959 CEST	61094	443	192.168.2.4	104.21.81.229
Oct 10, 2024 22:03:06.637624025 CEST	443	61094	104.21.81.229	192.168.2.4
Oct 10, 2024 22:03:06.664869070 CEST	61042	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:06.664881945 CEST	443	61042	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:06.665242910 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:06.665257931 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:06.665656090 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:06.666659117 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:06.666670084 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:06.704252958 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.704310894 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.704483986 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.704682112 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.704682112 CEST	61096	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.704689980 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.704696894 CEST	443	61096	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.712960958 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.713007927 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:06.716315985 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.718974113 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:06.718991041 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.211205006 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.211587906 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.211597919 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.212466002 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.212827921 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.212827921 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.212879896 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.212882042 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.212882042 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.213010073 CEST	443	61101	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.213061094 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.213141918 CEST	61101	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.213212013 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.213268042 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.213395119 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.213521957 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.213541985 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.215724945 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.216651917 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.216651917 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.216675043 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.216711998 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.319291115 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.320050955 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.320154905 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.320272923 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.320272923 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.323215008 CEST	61097	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.323220968 CEST	443	61097	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.324374914 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.324445963 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.325072050 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.325360060 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.325392962 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.401302099 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.401865959 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.401885033 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.402359962 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.402985096 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.402988911 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.403523922 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.403544903 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.405839920 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.405973911 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.405978918 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.406629086 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.406689882 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.407960892 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.407977104 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.470037937 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.470547915 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.470566988 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.471952915 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.471957922 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.509952068 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.510063887 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.510139942 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.510617018 CEST	61100	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.510656118 CEST	443	61100	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.511050940 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.511102915 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.511192083 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.512557030 CEST	61102	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.512577057 CEST	443	61102	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.517509937 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.517785072 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.517852068 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.518405914 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.518495083 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.518570900 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.519834042 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.519857883 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.519921064 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.520246983 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.520258904 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.520267963 CEST	61098	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.520272017 CEST	443	61098	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.520467997 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.520503998 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.523050070 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.523076057 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.524729967 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.524765015 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.524813890 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.524939060 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.524957895 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.570404053 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.570431948 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.570477962 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.570523024 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.570523024 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.570816994 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.570816994 CEST	61099	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.570826054 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.570832968 CEST	443	61099	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.574477911 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.574496984 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.574645042 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.575256109 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.575268030 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.736347914 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.736666918 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.736691952 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.737423897 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.737493038 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.737828970 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.737878084 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.737976074 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.737982988 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:07.784257889 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:07.969886065 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.970633030 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.970678091 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:07.971251011 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:07.971263885 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.028764009 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.028834105 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.028882027 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.030056953 CEST	61103	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.030071974 CEST	443	61103	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.030986071 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.031042099 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.031105995 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.031722069 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.031752110 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.136069059 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.136189938 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.136267900 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.136451960 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.136451960 CEST	61104	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.136487007 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.136511087 CEST	443	61104	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.140455961 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.140542984 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.140641928 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.140911102 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.140949011 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.223520041 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.224049091 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.224087000 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.224471092 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.224477053 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.226747990 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.227205038 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.227236032 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.227910042 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.227925062 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.232198954 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.232603073 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.232618093 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.232988119 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.232991934 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.301681995 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.302860022 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.302871943 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.303549051 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.303559065 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.325484037 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.325551033 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.325597048 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.325906992 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.325922012 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.325963020 CEST	61106	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.325968027 CEST	443	61106	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.329195976 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.329216003 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.329417944 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.329523087 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.329531908 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.330245972 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.330292940 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.330353975 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.330420971 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.330420971 CEST	61107	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.330442905 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.330463886 CEST	443	61107	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.332796097 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.332827091 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.332892895 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.333091021 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.333106041 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.335696936 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.336061954 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.336110115 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.336112022 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.336170912 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.336245060 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.336249113 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.336268902 CEST	61105	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.336272955 CEST	443	61105	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.338430882 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.338514090 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.338623047 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.338720083 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.338752985 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.414406061 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.415534019 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.415596962 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.415664911 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.415677071 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.415755033 CEST	61108	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.415760994 CEST	443	61108	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.417820930 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.417907000 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.418001890 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.418247938 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.418288946 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.501960039 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.502320051 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.502382994 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.503400087 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.503514051 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.503878117 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.503878117 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.503922939 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.503948927 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.504081964 CEST	443	61109	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.504177094 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.504177094 CEST	61109	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.504379034 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.504400015 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.504631996 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.504694939 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.504710913 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.794579029 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.795203924 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.795260906 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.795664072 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.795679092 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.898711920 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.906313896 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.906352043 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.906394005 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.906490088 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.906569958 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.906570911 CEST	61110	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.906610012 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.906622887 CEST	443	61110	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.909704924 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.909765959 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.910022020 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.910233021 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.910264969 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.975066900 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.976337910 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.976337910 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.976351023 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.976365089 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.979942083 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.980052948 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.980690956 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.980691910 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.980755091 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.980812073 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.981026888 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.981035948 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.981564999 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:08.981570005 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:08.988871098 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.989402056 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.989414930 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.989689112 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.990041971 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:08.990092039 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:08.990214109 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:09.034393072 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:09.034400940 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:09.079319954 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.079705000 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.079904079 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.080040932 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.080199003 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.080199957 CEST	61113	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.080243111 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.080270052 CEST	443	61113	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.080756903 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.080770016 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.080790997 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.080796003 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.080995083 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.081079960 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.081458092 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.081470966 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.081566095 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.081594944 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.081944942 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.082180977 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.082181931 CEST	61111	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.082191944 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.082199097 CEST	443	61111	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.082485914 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.082508087 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.082977057 CEST	61112	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.082982063 CEST	443	61112	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.087393045 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.087407112 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.087575912 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.088098049 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.088098049 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.088109016 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.088115931 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.088711977 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.088731050 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.088882923 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.088882923 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.088901997 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.088953018 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.089315891 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.089323997 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.180942059 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.181279898 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.182315111 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.182315111 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.182315111 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.185491085 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.185530901 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.185754061 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.188978910 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.188992023 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.277026892 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:09.277133942 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:09.279993057 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:09.284262896 CEST	61115	443	192.168.2.4	172.67.165.105
Oct 10, 2024 22:03:09.284275055 CEST	443	61115	172.67.165.105	192.168.2.4
Oct 10, 2024 22:03:09.487546921 CEST	61114	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.487610102 CEST	443	61114	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.581717014 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.582395077 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.582441092 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.583211899 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.583225012 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.683842897 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.683882952 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.684056044 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.684259892 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.684277058 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.684324026 CEST	61116	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.684335947 CEST	443	61116	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.687639952 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.687724113 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.687819958 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.688019991 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.688060045 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.760071039 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.760699034 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.760709047 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.761337996 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.761342049 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.763083935 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.763482094 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.763519049 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.763818979 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.763829947 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.767261982 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.767698050 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.767703056 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.768006086 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.768008947 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.860778093 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.860802889 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.860836029 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.860852957 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.860907078 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.861140013 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.861145020 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.861181021 CEST	61118	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.861185074 CEST	443	61118	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.863715887 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.863985062 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.864093065 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.864093065 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.864151955 CEST	61119	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.864176035 CEST	443	61119	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.864819050 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.864905119 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.865003109 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.865263939 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.865298033 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.866719007 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.866744995 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.866902113 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.867126942 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.867153883 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.868693113 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.868843079 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.868985891 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.869048119 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.869050980 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.869059086 CEST	61117	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.869061947 CEST	443	61117	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.871922970 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.871973991 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.872293949 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.872492075 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.872524023 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.886985064 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.887360096 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.887367010 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.887691021 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.887696028 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.991662979 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.992212057 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.992312908 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.992382050 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.992398024 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:09.992417097 CEST	61120	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:09.992424011 CEST	443	61120	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.005891085 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.005903959 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.006124973 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.006431103 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.006441116 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.323343992 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.324146986 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.324208021 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.324743986 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.324759960 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.423372030 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.423480988 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.423588037 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.423661947 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.423662901 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.423887968 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.423933983 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.423966885 CEST	61121	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.423983097 CEST	443	61121	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.427284956 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.427299023 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.427386999 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.427625895 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.427649021 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.526701927 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.527293921 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.527338982 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.527911901 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.527924061 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.531086922 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.531461954 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.531476021 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.532109022 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.532114983 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.548382044 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.548799992 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.548856974 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.549163103 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.549175978 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.673304081 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.676107883 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.676125050 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.676578999 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.676584959 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.684663057 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.684880018 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.684992075 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.686850071 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.686850071 CEST	61124	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.686882973 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.686906099 CEST	443	61124	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.686940908 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.687077045 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.687144995 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.693049908 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.693049908 CEST	61122	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.693085909 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.693109989 CEST	443	61122	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.701872110 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.701929092 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.702008963 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.702558041 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.702595949 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.702667952 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.702812910 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.702828884 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.703197956 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.703227997 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.774456024 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.774641991 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.774698019 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.774722099 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.774749994 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.774796963 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.774804115 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.774838924 CEST	61125	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.774842024 CEST	443	61125	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.776901007 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.776935101 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.777113914 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.777226925 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.777235985 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.865411997 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.865575075 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.865660906 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.865855932 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.865855932 CEST	61123	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.865870953 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.865879059 CEST	443	61123	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.868069887 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.868124962 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:10.868201971 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.868356943 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:10.868387938 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.130563021 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.131367922 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.131376028 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.131906033 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.131910086 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.232180119 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.232309103 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.232539892 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.232539892 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.232561111 CEST	61126	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.232566118 CEST	443	61126	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.235176086 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.235214949 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.235337973 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.235557079 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.235572100 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.370187998 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.371869087 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.371906996 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.372277021 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.372289896 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.376543999 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.376904011 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.376924038 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.377249956 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.377254963 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.459619999 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.459992886 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.460030079 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.460298061 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.460310936 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.477108955 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.477416992 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.477485895 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.477513075 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.477530956 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.477544069 CEST	61128	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.477550983 CEST	443	61128	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.479969025 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.479998112 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.480128050 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.480297089 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.480308056 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.577202082 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.577503920 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.577537060 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.577811003 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.577816963 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.581644058 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.582947016 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.582990885 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.583010912 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.583044052 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.583081961 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.583096981 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.583102942 CEST	61129	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.583108902 CEST	443	61129	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.584975004 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.585032940 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.585156918 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.585270882 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.585293055 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.606693983 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.606849909 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.606921911 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.606971979 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.607006073 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.607018948 CEST	61127	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.607038021 CEST	443	61127	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.608721018 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.608750105 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.608865976 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.608968973 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.608983994 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.679938078 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.680665016 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.680733919 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.680773973 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.680790901 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.680804014 CEST	61130	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.680810928 CEST	443	61130	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.682418108 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.682427883 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.682507038 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.682773113 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.682780981 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.930033922 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.930526018 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.930541039 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:11.930995941 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:11.930999994 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.030031919 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.030345917 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.030390978 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.030395985 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.030436993 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.030482054 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.030493975 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.030503035 CEST	61131	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.030508041 CEST	443	61131	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.033049107 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.033078909 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.033179998 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.033304930 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.033313036 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.167133093 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.167684078 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.167699099 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.168181896 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.168188095 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.241667032 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.242062092 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.242098093 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.242476940 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.242489100 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.271537066 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.272022009 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.272114992 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.272114992 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.272114992 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.274462938 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.274557114 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.274641037 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.274775982 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.274801016 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.277508974 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.277818918 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.277834892 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.278215885 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.278227091 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.347973108 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.349586010 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.349749088 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.349800110 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.349845886 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.349857092 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.349860907 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.350095987 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.350133896 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.350219965 CEST	61133	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.350234985 CEST	443	61133	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.350420952 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.350426912 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.352169991 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.352260113 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.352332115 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.352447987 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.352473021 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.378923893 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.379245996 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.379313946 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.379355907 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.379378080 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.379426003 CEST	61134	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.379437923 CEST	443	61134	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.381208897 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.381241083 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.381331921 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.381483078 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.381494045 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.452153921 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.452189922 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.452243090 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.452256918 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.452322960 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.452548981 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.452548981 CEST	61135	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.452558041 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.452568054 CEST	443	61135	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.454875946 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.454961061 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.455266953 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.455266953 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.455343962 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.581245899 CEST	61132	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.581257105 CEST	443	61132	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.731463909 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.731911898 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.731935978 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.732305050 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.732309103 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.834613085 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.835226059 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.835361004 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.835361004 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.835382938 CEST	61136	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.835391998 CEST	443	61136	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.837857962 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.837893963 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.838016987 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.838154078 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.838171005 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.920243025 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.920986891 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.920986891 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:12.921013117 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:12.921036005 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.022572994 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.022594929 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.022629023 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.022645950 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.022695065 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.022856951 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.022856951 CEST	61137	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.022871017 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.022880077 CEST	443	61137	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.025022030 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.025043964 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.025266886 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.025266886 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.025288105 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.042687893 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.043005943 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.043015003 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.043385029 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.043387890 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.110213041 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.110685110 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.110692978 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.111140966 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.111145020 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.142128944 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.142282963 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.142419100 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.142448902 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.142448902 CEST	61138	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.142463923 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.142471075 CEST	443	61138	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.146991968 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.147082090 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.153168917 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.153170109 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.153247118 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.160835981 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.161221981 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.161247969 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.164990902 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.165004015 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.214284897 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.214432001 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.214519978 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.214519978 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.214565039 CEST	61139	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.214570999 CEST	443	61139	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.216522932 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.216590881 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.216793060 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.216793060 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.216862917 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.262383938 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.262459040 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.262620926 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.262620926 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.262698889 CEST	61140	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.262726068 CEST	443	61140	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.264406919 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.264446020 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.264597893 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.264597893 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.264630079 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.540329933 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.540910959 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.540927887 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.541167021 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.541172981 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.663661957 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.664520979 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.664634943 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.664644957 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.664686918 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.664733887 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.664762020 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.664774895 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.664782047 CEST	61141	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.664787054 CEST	443	61141	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.667277098 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.667308092 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.667371988 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.667829990 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.667844057 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.743827105 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.744227886 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.744236946 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.744618893 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.744623899 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.842751980 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.843024015 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.843084097 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.843271971 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.843287945 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.843297005 CEST	61142	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.843302011 CEST	443	61142	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.846554041 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.846611977 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.846684933 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.847016096 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.847044945 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.871063948 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.871572018 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.871584892 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.871896982 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.871901989 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.882769108 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.883171082 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.883189917 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.883605003 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.883615971 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.924774885 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.925528049 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.925589085 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.926052094 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.926065922 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.977247000 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.977365971 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.977488041 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:13.989243031 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.989391088 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:13.989481926 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.023154020 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.023154020 CEST	61145	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.023178101 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.023190022 CEST	443	61145	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.024156094 CEST	61144	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.024198055 CEST	443	61144	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.032388926 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.032464027 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.032540083 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.032577038 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.032613039 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.036802053 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.039378881 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.039423943 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.039485931 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.042419910 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.042445898 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.042483091 CEST	61143	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.042496920 CEST	443	61143	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.051172972 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.051189899 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.075921059 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.075948954 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.076004982 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.078851938 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.078856945 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.078906059 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.081828117 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.081839085 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.084651947 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.084660053 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.339596033 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.340085030 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.340096951 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.340456963 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.340471983 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.438297033 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.439651966 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.439760923 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.439760923 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.439827919 CEST	61146	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.439832926 CEST	443	61146	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.442517996 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.442588091 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.442814112 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.442933083 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.442948103 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.511128902 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.511518955 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.511562109 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.511925936 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.511936903 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.610801935 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.610908985 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.610938072 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.610991955 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.611113071 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.611113071 CEST	61147	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.611123085 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.611133099 CEST	443	61147	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.614510059 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.614557028 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.614635944 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.614779949 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.614794970 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.741921902 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.742291927 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.742311001 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.742676020 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.742686033 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.778362989 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.778662920 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.778681040 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.779052973 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.779056072 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.793629885 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.793931007 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.793936968 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.794259071 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.794261932 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.924804926 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.924947977 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.925014973 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.925192118 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.925192118 CEST	61148	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.925224066 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.925247908 CEST	443	61148	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.927409887 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.927437067 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.927648067 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.927788973 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.927798033 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.928576946 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.928611994 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.928661108 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.928705931 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.928786039 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.928793907 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.928803921 CEST	61150	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.928807020 CEST	443	61150	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.930696964 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.930710077 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.930762053 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.930877924 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.930887938 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.931823015 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.931966066 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.932025909 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.932065010 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.932071924 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.932080030 CEST	61149	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.932084084 CEST	443	61149	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.933773994 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.933815002 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:14.934009075 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.934114933 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:14.934139013 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.160767078 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.161103964 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.161134005 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.161663055 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.161674023 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.265641928 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.265705109 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.265768051 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.265929937 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.265959978 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.265985966 CEST	61151	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.266000032 CEST	443	61151	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.268409967 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.268449068 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.268626928 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.268826008 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.268832922 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.339371920 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.339720011 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.339775085 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.340114117 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.340126991 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.441950083 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.442065954 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.442147017 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.442202091 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.442202091 CEST	61152	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.442231894 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.442253113 CEST	443	61152	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.444565058 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.444587946 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.444778919 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.444778919 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.444802046 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.617752075 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.618211985 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.618243933 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.618587017 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.618635893 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.618642092 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.618871927 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.618900061 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.619283915 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.619288921 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.622205973 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.622472048 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.622479916 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.622777939 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.622781992 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735340118 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735353947 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735399961 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735445976 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735450029 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.735491991 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.735635996 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.735647917 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.735651016 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735660076 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735671043 CEST	61154	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.735675097 CEST	443	61154	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735683918 CEST	61155	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.735692024 CEST	443	61155	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.735958099 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.736085892 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.736172915 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.736583948 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.736588001 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.736597061 CEST	61153	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.736599922 CEST	443	61153	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.739161968 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739168882 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.739321947 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739355087 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.739381075 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739424944 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739538908 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739550114 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.739639997 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739669085 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.739917994 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.739964008 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.740051031 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.740153074 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.740170002 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.983289003 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.983758926 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.983799934 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:15.984179974 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:15.984193087 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.082345963 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.082519054 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.082582951 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.082672119 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.082673073 CEST	61156	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.082700014 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.082720995 CEST	443	61156	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.085329056 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.085357904 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.085412025 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.085537910 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.085550070 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.113962889 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.114274979 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.114289045 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.114764929 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.114768028 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.241514921 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.242302895 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.242353916 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.242398024 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.242398977 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.243838072 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.243849039 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.243871927 CEST	61157	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.243875980 CEST	443	61157	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.246680975 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.246721983 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.246824026 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.246984005 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.247004986 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.456028938 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.456111908 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.456921101 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.456985950 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.457381010 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.457396984 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.457947016 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.457967997 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.458398104 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.458401918 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.469347000 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.476156950 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.476181030 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.476691008 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.476701975 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.556999922 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.557022095 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.557156086 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.557812929 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.557912111 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.558020115 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.559928894 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.559928894 CEST	61160	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.559976101 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.560007095 CEST	443	61160	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.565743923 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.565743923 CEST	61158	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.565753937 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.565762043 CEST	443	61158	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.575689077 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.575829983 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.575907946 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.588325024 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.588325024 CEST	61159	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.588347912 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.588367939 CEST	443	61159	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.609127045 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.609214067 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.609298944 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.641690016 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.641771078 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.649305105 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.649347067 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.649424076 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.649554014 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.649569988 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.659203053 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.659306049 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.659449100 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.660432100 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.660469055 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.738312960 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.738960981 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.738981962 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.740520954 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.740525961 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.839251041 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.839301109 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.839457989 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.839525938 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.839546919 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.839561939 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.839570045 CEST	61161	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.839575052 CEST	443	61161	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.843353987 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.843446016 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.843548059 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.843769073 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.843821049 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.880412102 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.880948067 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.880956888 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.881824017 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.881829977 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.979501009 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.979657888 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.979698896 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.979706049 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.979748011 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.993669987 CEST	61162	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.993680000 CEST	443	61162	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.999407053 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:16.999428034 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:16.999799013 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.000093937 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.000102997 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.923892021 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.924355984 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.924376965 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.925127983 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.925132990 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.931529999 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.932025909 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.932045937 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.932539940 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.932552099 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.934199095 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.934518099 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.934550047 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.935019016 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.935029030 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.946060896 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.946384907 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.946396112 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.946799994 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.946804047 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.949457884 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.949781895 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.949825048 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:17.950308084 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:17.950321913 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.023984909 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.024162054 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.024219036 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.024229050 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.024251938 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.024310112 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.024358034 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.024367094 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.024374962 CEST	61164	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.024378061 CEST	443	61164	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.027000904 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.027030945 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.027390003 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.027390003 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.027414083 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036067963 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036144018 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036201000 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036215067 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036258936 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036314964 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036336899 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036381960 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036413908 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036413908 CEST	61166	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036432028 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036452055 CEST	443	61166	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036472082 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036622047 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036634922 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.036674023 CEST	61165	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.036688089 CEST	443	61165	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.038896084 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.038971901 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.039041042 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.039200068 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.039237976 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.039362907 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.039402962 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.039474964 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.039554119 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.039576054 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056075096 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056092978 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056147099 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.056150913 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056317091 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.056320906 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056332111 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.056426048 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056452036 CEST	443	61167	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.056569099 CEST	61167	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.057985067 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.058144093 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.058262110 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.058368921 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.058398962 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.058428049 CEST	61163	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.058443069 CEST	443	61163	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.058749914 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.058759928 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.058979034 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.058979034 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.058995008 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.060836077 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.060853004 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.061019897 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.061182976 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.061193943 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.682215929 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.682738066 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.682749033 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.683357000 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.683367014 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.698287010 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.698380947 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.698833942 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.698851109 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.699537039 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.699542999 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.699970007 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.699976921 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.700529099 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.700534105 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.742872000 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.743649960 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.743668079 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.744066000 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.744070053 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.781925917 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.782661915 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.782705069 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.782747984 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.782747984 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.782845974 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.782845974 CEST	61168	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.782855034 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.782860994 CEST	443	61168	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.785839081 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.785897017 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.786026955 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.786273003 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.786298990 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.799243927 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.799710989 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.799736977 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.799820900 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.799819946 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.799882889 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.799953938 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.799954891 CEST	61170	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.799990892 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.800014973 CEST	443	61170	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.800410032 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.800564051 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.800683975 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.800683975 CEST	61171	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.800693035 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.800698996 CEST	443	61171	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.808820963 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.808834076 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.808948994 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.808955908 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.808964968 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.809134007 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.809354067 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.809364080 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.809523106 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.809536934 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.852485895 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.852519989 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.852591038 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.852916956 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.852921963 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.852931023 CEST	61172	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.852935076 CEST	443	61172	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.856602907 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.856704950 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:18.856832027 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.857110023 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:18.857151031 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.476708889 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.477256060 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.477313995 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.477880001 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.477893114 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.495203972 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.495611906 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.495634079 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.496025085 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.496030092 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.537890911 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.538439035 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.538528919 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.538880110 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.538896084 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.578804970 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.578872919 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.578965902 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.579019070 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.579068899 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.579237938 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.579279900 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.579322100 CEST	61173	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.579336882 CEST	443	61173	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.582737923 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.582756042 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.582833052 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.583019972 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.583029985 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.599374056 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.599885941 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.599946022 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.599987030 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.599996090 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.600003958 CEST	61175	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.600007057 CEST	443	61175	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.603106022 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.603111982 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.603188038 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.603338003 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.603347063 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.637502909 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.637547970 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.637746096 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.637842894 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.637842894 CEST	61176	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.637892008 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.637924910 CEST	443	61176	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.640177965 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.640229940 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:19.640319109 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.640430927 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:19.640465021 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.252396107 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.253460884 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.253474951 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.254828930 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.254832983 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.301903009 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.303313017 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.303327084 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.304634094 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.304639101 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.351773024 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.351918936 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.351986885 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.352253914 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.352266073 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.352315903 CEST	61178	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.352319956 CEST	443	61178	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.359355927 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.359383106 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.359570026 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.359972954 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.360001087 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.414056063 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.424738884 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.424798965 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.424839020 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.424861908 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.424945116 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.425420046 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.425441980 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.426393986 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.426407099 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.426882982 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.426894903 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.427015066 CEST	61177	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.427020073 CEST	443	61177	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.432836056 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.432921886 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.433033943 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.433362007 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.433397055 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.515202045 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.515968084 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.516014099 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.516652107 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.516664982 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.523432016 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.523492098 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.523557901 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.523829937 CEST	61169	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.523847103 CEST	443	61169	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.527285099 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.527338982 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.527445078 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.527538061 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.527563095 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.819045067 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.819119930 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.819190025 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.819219112 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.819247961 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.819298029 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.819439888 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.819466114 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.819490910 CEST	61174	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.819504976 CEST	443	61174	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.820334911 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.820869923 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.820894957 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.821211100 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.821228027 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.822017908 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.822068930 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.822177887 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.822288036 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.822300911 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.920881033 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.920912981 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.921154976 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.921250105 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.921250105 CEST	61179	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.921302080 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.921330929 CEST	443	61179	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.924195051 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.924247980 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:20.924357891 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.924511909 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:20.924540997 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.068671942 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.069160938 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.069195032 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.070050955 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.070060015 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.075593948 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.076046944 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.076107025 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.076232910 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.076247931 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.171308041 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.171686888 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.171780109 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.171780109 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.171816111 CEST	61180	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.171835899 CEST	443	61180	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.174509048 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.174554110 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.174631119 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.174779892 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.174794912 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.177836895 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.177908897 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.177962065 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.178097963 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.178112030 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.178144932 CEST	61181	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.178152084 CEST	443	61181	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.180038929 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.180074930 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.180139065 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.180246115 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.180260897 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.255434990 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.255896091 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.255956888 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.256162882 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.256179094 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.356868982 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.356908083 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.356973886 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.357844114 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.357872009 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.357924938 CEST	61182	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.357940912 CEST	443	61182	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.363087893 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.363127947 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.363291979 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.363637924 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.363666058 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.554305077 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.554907084 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.554924011 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.555479050 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.555485964 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.658293009 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.658890009 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.659008980 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.659045935 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.659157991 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.666635036 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.666635036 CEST	61183	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.666671991 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.666693926 CEST	443	61183	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.687892914 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.687944889 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.688040018 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.690821886 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.690838099 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.738471031 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.740803003 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.740892887 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.746997118 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.747013092 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.830745935 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.831267118 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.831306934 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.831772089 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.831779003 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.833237886 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.833519936 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.833554029 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.833945990 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.833956957 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.850785971 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.851130009 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.851317883 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.851317883 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.851317883 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.854198933 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.854224920 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:21.854361057 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.854547977 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:21.854564905 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.159403086 CEST	61185	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.159435987 CEST	443	61185	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340521097 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340595007 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340675116 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.340807915 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340871096 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.340879917 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340888977 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340904951 CEST	61187	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.340912104 CEST	443	61187	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340934038 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.340958118 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.340984106 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.341042995 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.341145992 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.341159105 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.341167927 CEST	61186	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.341172934 CEST	443	61186	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.343705893 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.343792915 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.343800068 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.343877077 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.343883038 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.343971014 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.344052076 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.344086885 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.344089985 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.344111919 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.347476959 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.347824097 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.347846985 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.348212004 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.348220110 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.458962917 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.459021091 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.459124088 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.459211111 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.459211111 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.459247112 CEST	61188	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.459259033 CEST	443	61188	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.461298943 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.461318016 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.461564064 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.461654902 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.461659908 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.534394979 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.534970045 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.534981012 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.535216093 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.535221100 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.577702999 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.578017950 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.578033924 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.578346968 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.578363895 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.653348923 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.653510094 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.653568029 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.653597116 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.653610945 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.653646946 CEST	61189	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.653654099 CEST	443	61189	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.655934095 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.655966043 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.656059980 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.656184912 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.656194925 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.741096020 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.741136074 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.741193056 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.741240978 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.741322994 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.741322994 CEST	61190	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.741333008 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.741343021 CEST	443	61190	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.743271112 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.743350983 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:22.743451118 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.743567944 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:22.743604898 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.046648026 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.047251940 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.047305107 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.047693968 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.047707081 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.121339083 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.122055054 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.122064114 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.122236013 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.122239113 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.149682045 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.149699926 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.149756908 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.149766922 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.149861097 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.150055885 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.150084972 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.150118113 CEST	61192	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.150131941 CEST	443	61192	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.152914047 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.152945042 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.153024912 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.153240919 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.153266907 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.220635891 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.220650911 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.220743895 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.220750093 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.220885992 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.220922947 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.220937967 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.220962048 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.220973969 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.221048117 CEST	61193	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.221050978 CEST	443	61193	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.223196983 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.223234892 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.223293066 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.223480940 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.223499060 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.309134960 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.309696913 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.309705019 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.309919119 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.309927940 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.404652119 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.405013084 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.405042887 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.405381918 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.405395031 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.410583019 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.410653114 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.410757065 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.410829067 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.410829067 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.410878897 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.410878897 CEST	61194	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.410892963 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.410903931 CEST	443	61194	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.413002968 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.413045883 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.413191080 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.413317919 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.413331032 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.508219004 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.508291960 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.511111975 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.511111975 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.511198997 CEST	61195	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.511226892 CEST	443	61195	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.513225079 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.513272047 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:23.513425112 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.513596058 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:23.513624907 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.058907032 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.060928106 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.060928106 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.060942888 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.060950994 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.061856985 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.063029051 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.063047886 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.067023993 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.067035913 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.102575064 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.104180098 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.104180098 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.104192019 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.104207993 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.174727917 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.181056023 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.181509972 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.181771040 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.181854963 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.182002068 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.182101965 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.182102919 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.182483912 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.196903944 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.196924925 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.198074102 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.198074102 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.198077917 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.198085070 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.198107004 CEST	61197	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.198111057 CEST	443	61197	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.200385094 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.200385094 CEST	61196	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.200407028 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.200427055 CEST	443	61196	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.206432104 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.206466913 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.206497908 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.206528902 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.206604004 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.206605911 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.206954002 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.206954956 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.206969023 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.206969976 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.207638025 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.207777977 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.207832098 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.207835913 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.207911015 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.208111048 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.208111048 CEST	61198	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.208115101 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.208117962 CEST	443	61198	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.215420008 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.215432882 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.215568066 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.215779066 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.215792894 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.295268059 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.295743942 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.295851946 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.296118975 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.296139956 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.296176910 CEST	61199	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.296190977 CEST	443	61199	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.298265934 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.298290014 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.298527002 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.298527002 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.298561096 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.446727991 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.447218895 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.447252989 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.447741985 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.447750092 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.547509909 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.547600031 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.547755003 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.547919989 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.547945976 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.547955036 CEST	61191	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.547961950 CEST	443	61191	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.550375938 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.550421000 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.550488949 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.550623894 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.550641060 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.864712954 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.865123987 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.865132093 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.865720987 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.865725040 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.877640009 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.877964973 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.877988100 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.878509045 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.878515959 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.891746044 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.892189026 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.892208099 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.893059969 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.893064976 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.951756954 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.952132940 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.952141047 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.952683926 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.952688932 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.964910984 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.964970112 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.965018988 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.965024948 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.965086937 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.965173006 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.965193033 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.965204954 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.965204954 CEST	61200	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.965209961 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.965215921 CEST	443	61200	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.967767954 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.967798948 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.968000889 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.968133926 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.968149900 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.983392954 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.983428001 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.983465910 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.983500004 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.983555079 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.983637094 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.983663082 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.983692884 CEST	61202	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.983707905 CEST	443	61202	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.986082077 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.986092091 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:24.986303091 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.986411095 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:24.986423969 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.055208921 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.055273056 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.055320978 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.055500984 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.055517912 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.055527925 CEST	61203	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.055531979 CEST	443	61203	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.057697058 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.057744026 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.057842016 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.057965994 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.057987928 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.225991011 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.230930090 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.230988026 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.231807947 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.231825113 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.387489080 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.387528896 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.387763023 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.387854099 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.387854099 CEST	61201	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.387898922 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.387929916 CEST	443	61201	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.391100883 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.391122103 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.391195059 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.391366959 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.391376972 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.640686989 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.641858101 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.641858101 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.641880035 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.641899109 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.709547997 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.710593939 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.710593939 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.710604906 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.710621119 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.736047983 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.737086058 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.737086058 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.737135887 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.737154007 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.743170023 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.743290901 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.743438959 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.743499041 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.743568897 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.743570089 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.743592024 CEST	61205	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.743603945 CEST	443	61205	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.746682882 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.746774912 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.746925116 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.747026920 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.747047901 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.829304934 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.829452991 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.829551935 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.829551935 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.830084085 CEST	61206	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.830091000 CEST	443	61206	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.832380056 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.832403898 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.832619905 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.832690954 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.832716942 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.838195086 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.838603020 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.838731050 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.838731050 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.838731050 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.840795040 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.840804100 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.841006994 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.841006994 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.841023922 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.871273994 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.871609926 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.871732950 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.871732950 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.871732950 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.873744011 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.873764038 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:25.873982906 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.873982906 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:25.874005079 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.024795055 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.025953054 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.025953054 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.025962114 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.025969982 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.123749971 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.123898029 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.123922110 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.124042988 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.124202013 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.124202013 CEST	61208	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.124207973 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.124216080 CEST	443	61208	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.127212048 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.127284050 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.127594948 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.127594948 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.127677917 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.143821001 CEST	61207	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.143852949 CEST	443	61207	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.174988031 CEST	61204	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.174998999 CEST	443	61204	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.444463968 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.445688009 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.445688009 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.445740938 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.445781946 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.448086977 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.448412895 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.448447943 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.448477983 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.448755980 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.448765993 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.449188948 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.449193954 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.449194908 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.449206114 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.537276030 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.537698984 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.537708044 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.538275957 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.538280010 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.544986010 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.545205116 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.545273066 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.545329094 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.545347929 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.545370102 CEST	61209	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.545384884 CEST	443	61209	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.547379017 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.547472000 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.547590971 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.547653913 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.547698021 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.547718048 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.547741890 CEST	61210	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.547754049 CEST	443	61210	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.548608065 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.548676968 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.548738003 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.548845053 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.548862934 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.550066948 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.550085068 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.550307035 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.550307035 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.550326109 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.552670956 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.553239107 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.553292036 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.553311110 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.553318977 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.553327084 CEST	61211	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.553330898 CEST	443	61211	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.555295944 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.555300951 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.555560112 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.555560112 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.555572033 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.637057066 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.637208939 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.637401104 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.637401104 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.637454033 CEST	61212	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.637459993 CEST	443	61212	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.640515089 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.640585899 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.640722990 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.640865088 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.640893936 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.833492994 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.834038973 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.834078074 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.834718943 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.834731102 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.937453032 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.938059092 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.938110113 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.938114882 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.938184023 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.938240051 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.938240051 CEST	61213	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.938272953 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.938301086 CEST	443	61213	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.941716909 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.941755056 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:26.941828966 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.942106009 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:26.942131996 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.201916933 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.202478886 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.202522993 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.203104019 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.203114986 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.216043949 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.216499090 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.216514111 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.217178106 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.217183113 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.241996050 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.242811918 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.242819071 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.243813992 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.243817091 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.306514978 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.306688070 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.306770086 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.306896925 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.306935072 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.306962967 CEST	61214	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.306977034 CEST	443	61214	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.310317993 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.310340881 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.310573101 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.310573101 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.310594082 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.345436096 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.345613003 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.345643044 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.345762968 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.345762968 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.346152067 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.346152067 CEST	61216	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.346155882 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.346163034 CEST	443	61216	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.350162983 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.350177050 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.350312948 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.350569010 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.350575924 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.367742062 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.368105888 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.368171930 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.368280888 CEST	61215	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.368292093 CEST	443	61215	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.373877048 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.373935938 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.374008894 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.374262094 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.374289989 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.578408003 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.582134962 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.582134962 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.582189083 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.582211971 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.678528070 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.678553104 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.678586006 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.678667068 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.679316044 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.679339886 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.679419041 CEST	61218	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.679431915 CEST	443	61218	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.683547974 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.683619022 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.685096025 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.689027071 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.689057112 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.690593958 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:03:27.695735931 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:03:27.909348011 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:03:27.914494991 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:03:27.934472084 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.935322046 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.935331106 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.935899973 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.935904980 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.976665020 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.979274035 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.979274035 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:27.979290009 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:27.979296923 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.030931950 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.031847000 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.031847954 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.031878948 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.031909943 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.034205914 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.034384012 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.034545898 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.034545898 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.034584045 CEST	61220	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.034590006 CEST	443	61220	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.037266970 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.037277937 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.037365913 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.037484884 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.037488937 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.077318907 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.077584982 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.077706099 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.077706099 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.077811956 CEST	61219	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.077815056 CEST	443	61219	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.079747915 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.079786062 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.079849958 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.079957962 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.079987049 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.130956888 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.131110907 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.131227970 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.131228924 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.131278038 CEST	61221	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.131303072 CEST	443	61221	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.133471966 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.133486032 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.133565903 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.133687019 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.133691072 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.202621937 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.203578949 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.203578949 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.203624010 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.203661919 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.301266909 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.301431894 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.301609993 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.301698923 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.301698923 CEST	61217	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.301723003 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.301743984 CEST	443	61217	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.304471016 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.304482937 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.304692984 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.304692984 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.304713011 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.375565052 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.376039982 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.376063108 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.376513958 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.376524925 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.481152058 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.481689930 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.481733084 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.481741905 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.481801033 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.481857061 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.481882095 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.481904984 CEST	61222	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.481919050 CEST	443	61222	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.484637976 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.484677076 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.484752893 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.484906912 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.484915018 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.674535990 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.675240993 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.675250053 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.675863028 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.675868034 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.756289959 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.756818056 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.756856918 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.757153034 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.757170916 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.774990082 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.775031090 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.775090933 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.775295973 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.775304079 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.775311947 CEST	61223	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.775316000 CEST	443	61223	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.778103113 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.778146982 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.778265953 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.778328896 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.778336048 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.788192034 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.788527012 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.788542032 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.788919926 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.788924932 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.862059116 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.862787962 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.862906933 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.862993002 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.862993002 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.863040924 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.863040924 CEST	61224	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.863059044 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.863073111 CEST	443	61224	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.865935087 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.866019964 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.866107941 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.866287947 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.866308928 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.888982058 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.889122963 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.889328957 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.889328957 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.889400959 CEST	61225	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.889408112 CEST	443	61225	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.891541958 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.891625881 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:28.891763926 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.891886950 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:28.891907930 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.154086113 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.154628992 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.154643059 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.155090094 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.155092955 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.256256104 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.256335020 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.256436110 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.256514072 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.256599903 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.256599903 CEST	61226	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.256612062 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.256620884 CEST	443	61226	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.259236097 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.259249926 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.259402037 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.259457111 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.259463072 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.331877947 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.332329988 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.332356930 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.332878113 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.332894087 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.431956053 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.432018995 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.432255983 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.432255983 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.432255983 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.434582949 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.434643984 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.434758902 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.434883118 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.434900999 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.480097055 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.480576038 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.480597973 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.480858088 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.480875015 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.577450037 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.578214884 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.578214884 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.578282118 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.578337908 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.581413984 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.581753969 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.581845999 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.581845999 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.583425045 CEST	61228	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.583453894 CEST	443	61228	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.583878040 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.583918095 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.584265947 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.584265947 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.584316015 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.599000931 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.599304914 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.599365950 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.599556923 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.599571943 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.643801928 CEST	61227	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.643826008 CEST	443	61227	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.678055048 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.678277969 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.678533077 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.678577900 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.678577900 CEST	61229	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.678597927 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.678612947 CEST	443	61229	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.683418989 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.683435917 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.687633991 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.687794924 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.687800884 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.704652071 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.704865932 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.704951048 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.704977036 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.705096960 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.705096960 CEST	61230	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.705113888 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.705142975 CEST	443	61230	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.707559109 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.707642078 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:29.707825899 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.707827091 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:29.707899094 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.405011892 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.405947924 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.405947924 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.405994892 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.406034946 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.426073074 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.426413059 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.426449060 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.426810980 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.426816940 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.430282116 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.430944920 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.430944920 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.430955887 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.430973053 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.441394091 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.441685915 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.441721916 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.442024946 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.442035913 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.511857986 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.511910915 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.511974096 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.512197971 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.512223005 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.512253046 CEST	61232	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.512267113 CEST	443	61232	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.515002012 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.515024900 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.515156984 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.515278101 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.515281916 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.540149927 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.540296078 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.540412903 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.540465117 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.540465117 CEST	61234	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.540479898 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.540489912 CEST	443	61234	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.542306900 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.542313099 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.542370081 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.542476892 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.542484045 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.547698975 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.547967911 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.548017979 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.548053980 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.548058987 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.548086882 CEST	61233	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.548093081 CEST	443	61233	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.549861908 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.549932003 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.550067902 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.550163031 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.550184965 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.553066969 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.553206921 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.553266048 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.553303957 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.553322077 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.553344011 CEST	61235	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.553354979 CEST	443	61235	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.555221081 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.555310965 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:30.555454016 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.555546999 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:30.555573940 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.191355944 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.192146063 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.192159891 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.193207026 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.193217039 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.210346937 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.211052895 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.211081982 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.211855888 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.211867094 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.237014055 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.237538099 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.237550020 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.238215923 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.238226891 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.246340990 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.246814013 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.246876955 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.247064114 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.247081041 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.292300940 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.292860985 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.292910099 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.292958975 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.292968035 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.292984009 CEST	61237	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.292988062 CEST	443	61237	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.295403004 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.295428991 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.295588017 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.295758009 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.295767069 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.311752081 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.311767101 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.311816931 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.311835051 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.311939955 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.311980963 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.311980963 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.312022924 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.312058926 CEST	61239	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.312073946 CEST	443	61239	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.312244892 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.312252998 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.312531948 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.312546968 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.314136028 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.314145088 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.314354897 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.314354897 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.314376116 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.349051952 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.349204063 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.349267960 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.349318981 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.349318981 CEST	61238	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.349332094 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.349340916 CEST	443	61238	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.349955082 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.350068092 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.350514889 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.350601912 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.350601912 CEST	61240	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.350646019 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.350677013 CEST	443	61240	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.351255894 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.351304054 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.351377010 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.351476908 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.351497889 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.352622032 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.352643967 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.352756977 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.352868080 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.352880001 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.413878918 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.414010048 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.414607048 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.414865017 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.414885044 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.414932013 CEST	61231	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.414937973 CEST	443	61231	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.417222023 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.417264938 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.417339087 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.417462111 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.417495012 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.954792023 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.955307007 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.955319881 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.955735922 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.955741882 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.961816072 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.962152004 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.962171078 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:31.962537050 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:31.962542057 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.028914928 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.029447079 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.029536009 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.029685974 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.029701948 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.033751011 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.034039021 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.034054041 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.034768105 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.034773111 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.057089090 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.057127953 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.057195902 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.057399988 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.057424068 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.057432890 CEST	61242	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.057437897 CEST	443	61242	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.060852051 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.060914993 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.060992956 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.061213017 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.061243057 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.065893888 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.066740990 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.066783905 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.066834927 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.069197893 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.069207907 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.069216013 CEST	61241	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.069219112 CEST	443	61241	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.071533918 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.071552038 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.071787119 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.071917057 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.071927071 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.073812008 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.074073076 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.074090004 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.074470043 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.074481010 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.136955976 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.137029886 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.137095928 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.137134075 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.137286901 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.137341976 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.137377977 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.137377977 CEST	61243	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.137398958 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.137434959 CEST	443	61243	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.140101910 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.140141010 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.140218973 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.140441895 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.140471935 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.141431093 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.141618967 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.141664982 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.141690016 CEST	61244	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.141695976 CEST	443	61244	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.144049883 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.144083977 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.144129038 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.144237995 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.144251108 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.180561066 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.180680037 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.180742979 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.180876017 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.180876017 CEST	61245	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.180906057 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.180927992 CEST	443	61245	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.183126926 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.183140039 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.183434963 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.183434963 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.183455944 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.737415075 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.737961054 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.737973928 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.738398075 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.738403082 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.739170074 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.739530087 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.739550114 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.739810944 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.739815950 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.790101051 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.790541887 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.790592909 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.790932894 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.790949106 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.831113100 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.831753016 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.831765890 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.832058907 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.832063913 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.837704897 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.838042974 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.838054895 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.838494062 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.838498116 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.841681957 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.841974020 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.842015982 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.842031002 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.842067957 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.842119932 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.842119932 CEST	61247	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.842124939 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.842132092 CEST	443	61247	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.844588041 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.844630957 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.844697952 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.844810009 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.844825029 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.892788887 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.893187046 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.893254995 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.893301010 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.893301010 CEST	61248	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.893326998 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.893349886 CEST	443	61248	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.895345926 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.895363092 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.895535946 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.895665884 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.895675898 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.932725906 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.932782888 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.932939053 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.932950020 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.933082104 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.933082104 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.933105946 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.933495045 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.933665037 CEST	443	61250	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.933759928 CEST	61250	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.935170889 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.935231924 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.935311079 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.935431004 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.935468912 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.945921898 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.946033955 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.946151972 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.946151972 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.946278095 CEST	61249	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.946296930 CEST	443	61249	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.948115110 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.948123932 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:32.948231936 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.948345900 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:32.948353052 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.031467915 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.031539917 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.031637907 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.031676054 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.031676054 CEST	61246	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.031696081 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.031733990 CEST	443	61246	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.033441067 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.033464909 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.033667088 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.033761024 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.033767939 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.541136026 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.541676044 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.541721106 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.542298079 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.542311907 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.643549919 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.644229889 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.644289017 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.644840002 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.644845963 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.662309885 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.663283110 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.663283110 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.663306952 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.663311005 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.667161942 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.667540073 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.667562008 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.667937994 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.667944908 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.671442032 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.671492100 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.671673059 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.671763897 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.671765089 CEST	61251	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.671801090 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.671827078 CEST	443	61251	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.674771070 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.674839020 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.675069094 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.675247908 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.675272942 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.742386103 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.742438078 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.742558002 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.742638111 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.742638111 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.742731094 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.742731094 CEST	61253	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.742772102 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.742800951 CEST	443	61253	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.746328115 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.746362925 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.746522903 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.746678114 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.746694088 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.749584913 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.750137091 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.750147104 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.750665903 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.750669956 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768551111 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768594980 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768639088 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.768647909 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768722057 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768802881 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.768820047 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768832922 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.768836975 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.768842936 CEST	61252	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.768847942 CEST	443	61252	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.771003008 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.771037102 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.771092892 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.771198988 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.771209002 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.789315939 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.789446115 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.789577007 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.789592981 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.789643049 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.789676905 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.789690018 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.789701939 CEST	61254	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.789706945 CEST	443	61254	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.792002916 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.792059898 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.792124987 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.792299032 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.792330027 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.849893093 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.849909067 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.849937916 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.849968910 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.850001097 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.850296974 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.850296974 CEST	61255	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.850303888 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.850311041 CEST	443	61255	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.853244066 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.853328943 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:33.853466988 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.853614092 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:33.853646040 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.366220951 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.366796017 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.366827965 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.368148088 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.368156910 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.391659975 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.392724991 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.392745972 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.394016981 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.394022942 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.452960968 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.454127073 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.454139948 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.455862999 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.455867052 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.472404957 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.472443104 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.472496986 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.476588011 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.476607084 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.476625919 CEST	61256	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.476632118 CEST	443	61256	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.482428074 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.482448101 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.482773066 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.482773066 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.482794046 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.487996101 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.499164104 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.499295950 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.499464035 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.514935017 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.515014887 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.516052961 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.516067028 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.516688108 CEST	61257	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.516696930 CEST	443	61257	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.520168066 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.520184994 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.520343065 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.520900011 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.520910978 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.535275936 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.535701990 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.535767078 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.536407948 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.536421061 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.553620100 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.553761005 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.553978920 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.554187059 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.554191113 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.554254055 CEST	61258	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.554258108 CEST	443	61258	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.559453964 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.559511900 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.559586048 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.559822083 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.559849977 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.630934954 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.631513119 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.631633043 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.631895065 CEST	61259	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.631913900 CEST	443	61259	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.635128021 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.635140896 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.635210991 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.635482073 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.635510921 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.637612104 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.637634039 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.637676954 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.637691975 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.637747049 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.637960911 CEST	61260	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.637981892 CEST	443	61260	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.643522978 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.643542051 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:34.643603086 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.643789053 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:34.643795013 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.176999092 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.177522898 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.177537918 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.178137064 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.178141117 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.198230028 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.199407101 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.199415922 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.199829102 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.199831963 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.221349001 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.221762896 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.221807957 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.222620964 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.222635031 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.281233072 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.281254053 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.281295061 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.281305075 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.281434059 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.281564951 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.281570911 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.281615973 CEST	61261	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.281625986 CEST	443	61261	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.284612894 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.284636974 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.284709930 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.284889936 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.284893990 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.299316883 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.299376011 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.299436092 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.299484015 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.299484015 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.299491882 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.299535036 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.319994926 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.320019960 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.320091009 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.320115089 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.320266008 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.320266008 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.320283890 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.320465088 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.320499897 CEST	443	61263	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.320580959 CEST	61263	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.322565079 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.322653055 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.322798014 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.322896004 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.322917938 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.340452909 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.340822935 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.340837955 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.341401100 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.341406107 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.345114946 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.345501900 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.345525980 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.346028090 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.346043110 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.384766102 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.384852886 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.384866953 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.384949923 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.384949923 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.384948969 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.384999990 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.385062933 CEST	61262	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.385071993 CEST	443	61262	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.387284040 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.387305975 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.387357950 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.387501955 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.387510061 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.445835114 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.445853949 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.445904970 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.445915937 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.445965052 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.445972919 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.446099997 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.446111917 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.446122885 CEST	61265	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.446126938 CEST	443	61265	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.449229002 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.449317932 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.449407101 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.449510098 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.449537039 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.452749968 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.452806950 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.452847958 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.452881098 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.452912092 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.452943087 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.452964067 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544277906 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.544414997 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544455051 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.544502974 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.544527054 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.544543982 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544581890 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544581890 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544708014 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544751883 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.544781923 CEST	61264	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.544797897 CEST	443	61264	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.549165964 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.549235106 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.549303055 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.549587011 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.549619913 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.967703104 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.968262911 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.968286991 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:35.969032049 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:35.969038010 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.041270971 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.041714907 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.041753054 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.042254925 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.042267084 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.078825951 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.079189062 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.079200983 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.079900980 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.079906940 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084059954 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084074974 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084158897 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.084172964 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084341049 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.084356070 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084427118 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.084466934 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084492922 CEST	443	61266	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.084569931 CEST	61266	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.087290049 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.087310076 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.087428093 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.087630033 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.087644100 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.506933928 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.507023096 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.507384062 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.507384062 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.507384062 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.507823944 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.507999897 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.508059978 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.508198977 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.508198977 CEST	61268	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.508222103 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.508230925 CEST	443	61268	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510040045 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510077000 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510179996 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510349989 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510380983 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510401964 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510413885 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510431051 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510548115 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510632992 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510648012 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510885000 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.510891914 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.510970116 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.511261940 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.511296034 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.511492968 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.511506081 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.511890888 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.511903048 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.616854906 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.617032051 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.617115021 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.617221117 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.617222071 CEST	61270	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.617255926 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.617281914 CEST	443	61270	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.620176077 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.620238066 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.620305061 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.620424032 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.620440960 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.623531103 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.623593092 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.623658895 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.623754978 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.623755932 CEST	61269	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.623770952 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.623790026 CEST	443	61269	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.625848055 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.625863075 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.626102924 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.626102924 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.626121998 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.815628052 CEST	61267	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.815692902 CEST	443	61267	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.835498095 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.835933924 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.835952044 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.836395025 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.836400986 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.944308996 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.944325924 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.944355011 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.944369078 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.944396973 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.944605112 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.944614887 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:36.944634914 CEST	61271	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:36.944639921 CEST	443	61271	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.202061892 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.202611923 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.202675104 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.203018904 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.203032970 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.208833933 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.209253073 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.209263086 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.210009098 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.210011959 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.301775932 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.301917076 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.302026987 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.302107096 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.302140951 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.302167892 CEST	61273	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.302182913 CEST	443	61273	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.308412075 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.308810949 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.308849096 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.309376955 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.309391022 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.323002100 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.323587894 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.323662996 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.323662996 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.323690891 CEST	61272	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.323704004 CEST	443	61272	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.326899052 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.327404022 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.327411890 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.327907085 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.327914953 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.410938978 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.411086082 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.411142111 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.411189079 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.411189079 CEST	61274	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.411215067 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.411237955 CEST	443	61274	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.432766914 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.432816982 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.432868958 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.433044910 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.433060884 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:37.433075905 CEST	61275	443	192.168.2.4	13.107.246.45
Oct 10, 2024 22:03:37.433083057 CEST	443	61275	13.107.246.45	192.168.2.4
Oct 10, 2024 22:03:55.906101942 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:55.906208992 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:55.906301975 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:55.906730890 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:55.906768084 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:57.195746899 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:57.196170092 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:57.196237087 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:57.196584940 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:57.196933985 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:03:57.197005987 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:03:57.237709999 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:04:07.107148886 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:04:07.107225895 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:04:07.107381105 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:04:07.437448025 CEST	61276	443	192.168.2.4	142.250.186.36
Oct 10, 2024 22:04:07.437532902 CEST	443	61276	142.250.186.36	192.168.2.4
Oct 10, 2024 22:04:12.706413031 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:04:12.711669922 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:04:12.925128937 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:04:12.930775881 CEST	8443	49747	188.114.97.3	192.168.2.4
Oct 10, 2024 22:04:57.722198009 CEST	49737	8443	192.168.2.4	188.114.96.3
Oct 10, 2024 22:04:57.728658915 CEST	8443	49737	188.114.96.3	192.168.2.4
Oct 10, 2024 22:04:57.940902948 CEST	49747	8443	192.168.2.4	188.114.97.3
Oct 10, 2024 22:04:57.945857048 CEST	8443	49747	188.114.97.3	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 22:01:51.119560957 CEST	53	64822	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:51.206967115 CEST	53	56577	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:52.204262972 CEST	53	61396	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:54.490564108 CEST	50515	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:54.490688086 CEST	51280	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:54.502062082 CEST	53	50515	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:54.531296968 CEST	53	51280	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:55.518793106 CEST	54324	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:55.518913984 CEST	62000	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:55.519248009 CEST	60566	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:55.519342899 CEST	55850	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:55.526123047 CEST	53	60566	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:55.526231050 CEST	53	55850	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:55.526544094 CEST	53	54324	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:55.545986891 CEST	53	62000	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:55.749527931 CEST	50250	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:55.749655008 CEST	52831	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:55.757299900 CEST	53	52831	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:55.757318974 CEST	53	50250	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:56.039575100 CEST	63733	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:56.039782047 CEST	52682	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:56.040354967 CEST	50737	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:56.040535927 CEST	62376	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:56.046776056 CEST	53	63733	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:56.046791077 CEST	53	52682	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:56.118377924 CEST	53	62376	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:56.119204044 CEST	53	50737	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:56.888382912 CEST	53	57004	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:57.220467091 CEST	64614	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:57.220686913 CEST	59390	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:57.223424911 CEST	60642	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:57.223612070 CEST	64425	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:57.231080055 CEST	53	60642	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:57.231393099 CEST	53	64425	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:57.231933117 CEST	53	64614	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:57.239604950 CEST	53	59390	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:57.877974033 CEST	65294	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:57.878017902 CEST	61730	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:01:57.885144949 CEST	53	61730	1.1.1.1	192.168.2.4
Oct 10, 2024 22:01:57.885827065 CEST	53	65294	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:03.206391096 CEST	53	55023	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:09.179207087 CEST	53	56496	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:10.872092009 CEST	58757	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:10.872347116 CEST	56023	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:11.235110044 CEST	53	56023	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:11.247886896 CEST	53	58757	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:11.738596916 CEST	138	138	192.168.2.4	192.168.2.255
Oct 10, 2024 22:02:12.819988966 CEST	62221	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:12.820316076 CEST	49211	53	192.168.2.4	1.1.1.1
Oct 10, 2024 22:02:13.190093994 CEST	53	49211	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:13.204699993 CEST	53	62221	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:28.171169996 CEST	53	55356	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:50.738409996 CEST	53	57010	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:51.329736948 CEST	53	49723	1.1.1.1	192.168.2.4
Oct 10, 2024 22:02:53.490744114 CEST	53	65441	1.1.1.1	192.168.2.4
Oct 10, 2024 22:03:59.592077017 CEST	53	49279	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 10, 2024 22:01:54.531408072 CEST	192.168.2.4	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 22:01:55.546040058 CEST	192.168.2.4	1.1.1.1	c243	(Port unreachable)	Destination Unreachable
Oct 10, 2024 22:01:57.239656925 CEST	192.168.2.4	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 22:01:54.490564108 CEST	192.168.2.4	1.1.1.1	0x75e1	Standard query (0)	15a69upw.1bigcircle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:54.490688086 CEST	192.168.2.4	1.1.1.1	0xee07	Standard query (0)	_8443._https.15a69upw.1bigcircle.com	65	IN (0x0001)	false
Oct 10, 2024 22:01:55.518793106 CEST	192.168.2.4	1.1.1.1	0xaac3	Standard query (0)	www.w3schools.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:55.518913984 CEST	192.168.2.4	1.1.1.1	0xb9c1	Standard query (0)	www.w3schools.com	65	IN (0x0001)	false
Oct 10, 2024 22:01:55.519248009 CEST	192.168.2.4	1.1.1.1	0x85c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:55.519342899 CEST	192.168.2.4	1.1.1.1	0x3ac7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 10, 2024 22:01:55.749527931 CEST	192.168.2.4	1.1.1.1	0xdf52	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:55.749655008 CEST	192.168.2.4	1.1.1.1	0xc9bb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 22:01:56.039575100 CEST	192.168.2.4	1.1.1.1	0xf8b	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:56.039782047 CEST	192.168.2.4	1.1.1.1	0x2a08	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Oct 10, 2024 22:01:56.040354967 CEST	192.168.2.4	1.1.1.1	0x2a50	Standard query (0)	kasumbo.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:56.040535927 CEST	192.168.2.4	1.1.1.1	0x7a5c	Standard query (0)	kasumbo.com	65	IN (0x0001)	false
Oct 10, 2024 22:01:57.220467091 CEST	192.168.2.4	1.1.1.1	0x2578	Standard query (0)	15a69upw.1bigcircle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.220686913 CEST	192.168.2.4	1.1.1.1	0xf6e9	Standard query (0)	_8443._https.15a69upw.1bigcircle.com	65	IN (0x0001)	false
Oct 10, 2024 22:01:57.223424911 CEST	192.168.2.4	1.1.1.1	0xb76d	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.223612070 CEST	192.168.2.4	1.1.1.1	0xb7b2	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Oct 10, 2024 22:01:57.877974033 CEST	192.168.2.4	1.1.1.1	0x8e14	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.878017902 CEST	192.168.2.4	1.1.1.1	0x2d76	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 10, 2024 22:02:10.872092009 CEST	192.168.2.4	1.1.1.1	0x140d	Standard query (0)	fondation.chiliesdigital.co.za	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:10.872347116 CEST	192.168.2.4	1.1.1.1	0x4810	Standard query (0)	fondation.chiliesdigital.co.za	65	IN (0x0001)	false
Oct 10, 2024 22:02:12.819988966 CEST	192.168.2.4	1.1.1.1	0x5283	Standard query (0)	fondation.chiliesdigital.co.za	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:12.820316076 CEST	192.168.2.4	1.1.1.1	0x736	Standard query (0)	fondation.chiliesdigital.co.za	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 22:01:54.502062082 CEST	1.1.1.1	192.168.2.4	0x75e1	No error (0)	15a69upw.1bigcircle.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:54.502062082 CEST	1.1.1.1	192.168.2.4	0x75e1	No error (0)	15a69upw.1bigcircle.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:54.531296968 CEST	1.1.1.1	192.168.2.4	0xee07	No error (0)	_8443._https.15a69upw.1bigcircle.com			65	IN (0x0001)	false
Oct 10, 2024 22:01:55.526123047 CEST	1.1.1.1	192.168.2.4	0x85c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:55.526123047 CEST	1.1.1.1	192.168.2.4	0x85c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:55.526231050 CEST	1.1.1.1	192.168.2.4	0x3ac7	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 10, 2024 22:01:55.526544094 CEST	1.1.1.1	192.168.2.4	0xaac3	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:55.526544094 CEST	1.1.1.1	192.168.2.4	0xaac3	No error (0)	cs837.wac.edgecastcdn.net		192.229.133.221	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:55.545986891 CEST	1.1.1.1	192.168.2.4	0xb9c1	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:55.757299900 CEST	1.1.1.1	192.168.2.4	0xc9bb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 22:01:55.757318974 CEST	1.1.1.1	192.168.2.4	0xdf52	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:56.046776056 CEST	1.1.1.1	192.168.2.4	0xf8b	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:56.046776056 CEST	1.1.1.1	192.168.2.4	0xf8b	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:56.046776056 CEST	1.1.1.1	192.168.2.4	0xf8b	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:56.046791077 CEST	1.1.1.1	192.168.2.4	0x2a08	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:56.046791077 CEST	1.1.1.1	192.168.2.4	0x2a08	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:56.119204044 CEST	1.1.1.1	192.168.2.4	0x2a50	No error (0)	kasumbo.com		108.178.43.142	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231080055 CEST	1.1.1.1	192.168.2.4	0xb76d	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231080055 CEST	1.1.1.1	192.168.2.4	0xb76d	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231080055 CEST	1.1.1.1	192.168.2.4	0xb76d	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231393099 CEST	1.1.1.1	192.168.2.4	0xb7b2	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231393099 CEST	1.1.1.1	192.168.2.4	0xb7b2	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231933117 CEST	1.1.1.1	192.168.2.4	0x2578	No error (0)	15a69upw.1bigcircle.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.231933117 CEST	1.1.1.1	192.168.2.4	0x2578	No error (0)	15a69upw.1bigcircle.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:01:57.239604950 CEST	1.1.1.1	192.168.2.4	0xf6e9	No error (0)	_8443._https.15a69upw.1bigcircle.com			65	IN (0x0001)	false
Oct 10, 2024 22:01:57.885827065 CEST	1.1.1.1	192.168.2.4	0x8e14	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:11.235110044 CEST	1.1.1.1	192.168.2.4	0x4810	No error (0)	fondation.chiliesdigital.co.za			65	IN (0x0001)	false
Oct 10, 2024 22:02:11.247886896 CEST	1.1.1.1	192.168.2.4	0x140d	No error (0)	fondation.chiliesdigital.co.za		104.21.81.229	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:11.247886896 CEST	1.1.1.1	192.168.2.4	0x140d	No error (0)	fondation.chiliesdigital.co.za		172.67.165.105	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:13.190093994 CEST	1.1.1.1	192.168.2.4	0x736	No error (0)	fondation.chiliesdigital.co.za			65	IN (0x0001)	false
Oct 10, 2024 22:02:13.204699993 CEST	1.1.1.1	192.168.2.4	0x5283	No error (0)	fondation.chiliesdigital.co.za		172.67.165.105	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:13.204699993 CEST	1.1.1.1	192.168.2.4	0x5283	No error (0)	fondation.chiliesdigital.co.za		104.21.81.229	A (IP address)	IN (0x0001)	false
Oct 10, 2024 22:02:47.586826086 CEST	1.1.1.1	192.168.2.4	0xf0df	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 22:02:47.586826086 CEST	1.1.1.1	192.168.2.4	0xf0df	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

cdnjs.cloudflare.com

www.w3schools.com

kasumbo.com

logincdn.msftauth.net

fondation.chiliesdigital.co.za

fs.microsoft.com

a.nel.cloudflare.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	104.17.25.14	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:56 UTC	599	OUT	GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:56 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:01:56 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-7918" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 41029 Expires: Tue, 30 Sep 2025 20:01:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fLUGrjFVYB0dM4n2LoeDArcmpP8yqWpZZorKWDCydsZ%2FUzo5ybvduNAyxCZw0yPB2oC83rttqnMMyV7wOYfRjPkjFhNiaBlb9hLXaJuJ97inVty%2BFA8Px8omW6qm5vOKJERpNp2k"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d0934859e1b8c54-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:01:56 UTC	428	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: ontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-bl
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f Data Ascii: ransform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-ro
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 Data Ascii: -stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-enve
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: :"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: t:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f0
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: ash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{conte
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: re{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: a-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{conten
2024-10-10 20:01:56 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: tent:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	192.229.133.221	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:56 UTC	557	OUT	GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:56 UTC	580	IN	HTTP/1.1 200 OK Age: 537146 Cache-Control: public,max-age=31536000,public Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; Content-Type: text/css Date: Thu, 10 Oct 2024 20:01:56 GMT Etag: "03e8ec6616db1:0+gzip+ident" Last-Modified: Fri, 04 Oct 2024 14:08:44 GMT Server: ECS (lhd/35B3) Vary: Accept-Encoding X-Cache: HIT X-Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; X-Powered-By: ASP.NET Content-Length: 23427 Connection: close
2024-10-10 20:01:56 UTC	16383	IN	Data Raw: ef bb bf 2f 2a 20 57 33 2e 43 53 53 20 34 2e 31 35 20 44 65 63 65 6d 62 65 72 20 32 30 32 30 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 Data Ascii: /* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-web
2024-10-10 20:01:56 UTC	7044	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 63 64 34 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 62 6c 75 65 2d 67 72 65 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 65 79 3a 68 6f 76 65 72 2c 2e 77 33 2d 62 6c 75 65 2d 67 72 61 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 61 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 67 72 65 65 6e 2c 2e 77 33 2d 68 6f 76 65 72 2d 67 72 65 65 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: !important;background-color:#00bcd4!important}.w3-blue-grey,.w3-hover-blue-grey:hover,.w3-blue-gray,.w3-hover-blue-gray:hover{color:#fff!important;background-color:#607d8b!important}.w3-green,.w3-hover-green:hover{color:#fff!important;background-color:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	108.178.43.142	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:56 UTC	612	OUT	GET /smarty/xls_v1.6/tail-spin.svg HTTP/1.1 Host: kasumbo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:56 UTC	475	IN	HTTP/1.1 403 Forbidden Connection: close content-type: text/html content-length: 146 date: Thu, 10 Oct 2024 20:01:55 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff vary: User-Agent,Accept-Encoding alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-10 20:01:56 UTC	146	IN	Data Raw: 3c 70 3e 54 68 69 73 20 77 65 62 73 69 74 65 20 68 61 73 20 62 65 65 6e 20 64 69 73 61 62 6c 65 64 2e 20 3c 2f 70 3e 3c 70 3e 20 49 66 20 79 6f 75 20 61 72 65 20 74 68 65 20 73 69 74 65 2d 6f 77 6e 65 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 54 65 63 68 6e 69 63 61 6c 20 53 75 70 70 6f 72 74 20 66 6f 72 20 66 75 72 74 68 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 61 73 73 69 73 74 61 6e 63 65 2e 3c 2f 70 3e Data Ascii: <p>This website has been disabled. </p><p> If you are the site-owner, please contact Technical Support for further information and assistance.</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 20:01:57 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=160998 Date: Thu, 10 Oct 2024 20:01:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	152.199.21.175	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:56 UTC	648	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:57 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 17331886 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 10 Oct 2024 20:01:57 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-10 20:01:57 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 20:01:58 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=161037 Date: Thu, 10 Oct 2024 20:01:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 20:01:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	152.199.21.175	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:58 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:58 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 17331887 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 10 Oct 2024 20:01:58 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (lhc/793D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e98d5e21-301e-0028-71ad-7d9304000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-10 20:01:58 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	35.190.80.1	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:58 UTC	565	OUT	OPTIONS /report/v4?s=LtH6Xi8Q7Gnavhp1wUbKApvKXCOHgJa%2FdQLm6ALe44LTqQuf%2B6d9x5UA2DeAVYs86HOAjRoHRNqrvB1q4Ne8g%2FoMYe7JzkNubtAkAM1m3ACBkUBvD2vheO3ialvd%2BpjKtUfUHmuGJyD49wXOAynH HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://15a69upw.1bigcircle.com:8443 Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 10 Oct 2024 20:01:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49753	35.190.80.1	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:01:58 UTC	494	OUT	POST /report/v4?s=LtH6Xi8Q7Gnavhp1wUbKApvKXCOHgJa%2FdQLm6ALe44LTqQuf%2B6d9x5UA2DeAVYs86HOAjRoHRNqrvB1q4Ne8g%2FoMYe7JzkNubtAkAM1m3ACBkUBvD2vheO3ialvd%2BpjKtUfUHmuGJyD49wXOAynH HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 444 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:01:58 UTC	444	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 37 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 31 35 61 36 39 75 70 77 2e 31 62 69 67 63 69 72 63 6c 65 2e 63 6f 6d Data Ascii: [{"age":6,"body":{"elapsed_time":379,"method":"GET","phase":"application","protocol":"h2","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":405,"type":"http.error"},"type":"network-error","url":"https://15a69upw.1bigcircle.com
2024-10-10 20:01:59 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 10 Oct 2024 20:01:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:06 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OupGukMMYU+4Xd7&MD=PM38sRwe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 20:02:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b57dfd19-516b-44ad-acf2-6d3cb49c0553 MS-RequestId: 44716bf9-041b-4ea4-a1a2-65c396789b95 MS-CV: uYXjoXDy/EKtmqrg.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 20:02:06 GMT Connection: close Content-Length: 24490
2024-10-10 20:02:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-10 20:02:07 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49769	104.21.81.229	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:12 UTC	668	OUT	POST /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://15a69upw.1bigcircle.com:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:02:12 UTC	40	OUT	Data Raw: 75 73 72 6e 3d 64 6f 6e 2e 64 65 67 6c 6f 72 69 61 25 34 30 65 76 65 72 62 72 69 64 67 65 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=don.degloria%40everbridge.com&psrd=
2024-10-10 20:02:12 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M9CG8ZWpX2m8%2FpYpOKMelPrHz0mIvRdfsTOfuly8h0z7HJSiiF91EcnThej64D3jIU%2BwktZXsSil8zPiEHfxFatRjLyCWTxunFJcRsznA8fgOsTKjA9Y7wR3v2NLf3NiKtG%2BuFzGWlmJ5HqPJywTdkI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d0934eade7f7ca5-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:02:12 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:02:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49768	104.21.81.229	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:12 UTC	668	OUT	POST /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://15a69upw.1bigcircle.com:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:02:12 UTC	40	OUT	Data Raw: 75 73 72 6e 3d 64 6f 6e 2e 64 65 67 6c 6f 72 69 61 25 34 30 65 76 65 72 62 72 69 64 67 65 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=don.degloria%40everbridge.com&psrd=
2024-10-10 20:02:12 UTC	751	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NTvQCnghz4g5Q%2FZLAM5bjFpzQUp1ORcRsWU%2B15kb1erZSQbdg4Vw39Efua%2Bcf%2F4wZbrxtVW9vcDAQvG5%2FxI%2BcPBF33O%2F8nn2C5tDbiFNpltJd1qb3MJfrK0mbMH8avL4ZBvfy2WyaEIRKJKHtMx8%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d0934eaee770f70-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:02:12 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:02:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49771	172.67.165.105	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:14 UTC	368	OUT	GET /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:02:14 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PEBmcA4o%2FhCX6vAQLtbsDxCJTMfzWbZ1dXmAHT4E37847Krq9uIMuoSIJu3895ZZpKOTQe6N1hstQholtFiZlTATYKM2vv8ghIlJGxjzw5xGZ8eTis5Axt1yaTH%2BN%2B96qImASwjQkfbu7WIG5WrhT%2FU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d0934f7788878d0-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:02:14 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:02:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49773	172.67.165.105	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:15 UTC	368	OUT	GET /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:02:15 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5MOzksoZaYKusVh5X7p4F34cQe06cpubilNgHZxdo40BIgYOHS2drqXIp142lY5etN80eldrw8NjmRB1tP6hTTN98PCxX1CgPaROXljROh8keh%2BIPeC1sp5YI%2B4SIIZTOZscf5lzjbbYI38dokyk5w8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d0934ffbbdf4372-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:02:15 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:02:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49774	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:44 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=OupGukMMYU+4Xd7&MD=PM38sRwe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 20:02:44 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: b96a4a14-61f0-4eaf-b18c-1e7318b4bc41 MS-RequestId: 925fb2da-4fa9-443e-9b08-3584537e46aa MS-CV: 8IIMJWgrOUatfkq7.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 20:02:44 GMT Connection: close Content-Length: 30005
2024-10-10 20:02:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-10 20:02:44 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:48 UTC	561	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: b415ce4c-a01e-0053-0c33-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200248Z-185b7d577bdt2k4f7f9nr1pp7s00000002gg000000012hc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:02:48 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-10 20:02:48 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:49 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:49 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3735e006-a01e-006f-3de4-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200249Z-17db6f7c8cffjrz2m4352snqkw000000013g000000016yhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:49 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:49 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:49 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200249Z-17db6f7c8cf5mtxmr1c51513n0000000013000000000cnq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:49 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:49 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:49 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ced16f83-c01e-008e-1322-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200249Z-17db6f7c8cffjrz2m4352snqkw000000018g00000000ayuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:49 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:49 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:49 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200249Z-17db6f7c8cfnqpbkckdefmqa4400000000xg00000000b2vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:49 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: db47d9da-201e-0096-57d7-19ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200249Z-185b7d577bdd97twt8zr6y8zrg000000035g0000000008kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:50 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200250Z-17db6f7c8cfnqpbkckdefmqa4400000000xg00000000b2z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:50 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:50 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200250Z-17db6f7c8cffjrz2m4352snqkw000000018000000000du6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:50 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:50 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200250Z-17db6f7c8cfqkqk8bn4ck6f72000000000h000000000gsyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:50 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:50 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:50 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200250Z-17db6f7c8cfqkqk8bn4ck6f72000000000kg00000000fp8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:50 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:50 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200250Z-17db6f7c8cf58jztrd88d8aypg00000000tg000000004a4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3f94a801-101e-007a-28fa-19047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-185b7d577bdt2k4f7f9nr1pp7s00000002hg00000000wm2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 4a155f70-001e-0017-2dd7-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-17db6f7c8cf96dsme4rhmefnfs00000000fg00000000220d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-17db6f7c8cfp6q2mfn13vuw4ds00000000m000000000bnhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-17db6f7c8cf58jztrd88d8aypg00000000sg000000009kmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-17db6f7c8cf7s6chrx36act2pg00000000zg000000016z4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-17db6f7c8cfqkqk8bn4ck6f72000000000mg00000000g417 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200251Z-17db6f7c8cfbtxhfpq53x2ehdn00000000y0000000004vvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:51 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e5c54f26-c01e-00a1-35de-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200252Z-17db6f7c8cfqxt4wrzg7st2fm80000000120000000005223 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:52 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200252Z-17db6f7c8cfvzwz27u5rnq9kpc000000013000000000zgtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:52 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200252Z-17db6f7c8cf7s6chrx36act2pg000000012000000000sytz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:52 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:52 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200252Z-17db6f7c8cffjrz2m4352snqkw00000001a0000000003uc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:52 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:52 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200252Z-17db6f7c8cfhzb2znbk0zyvf6n00000000d0000000004gqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:52 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200253Z-17db6f7c8cfhzb2znbk0zyvf6n00000000dg00000000519h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:52 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200253Z-17db6f7c8cf5mtxmr1c51513n000000000y0000000017e97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:53 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:53 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 604435ea-501e-00a3-69c9-19c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200253Z-185b7d577bdd97twt8zr6y8zrg00000002yg000000017fuf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:53 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200253Z-17db6f7c8cfrbg6x0qcg5vwtus00000001a0000000004d7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:53 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200253Z-17db6f7c8cfkzc2r8tan3gsa7n00000000v0000000017nxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:53 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: f30ac50d-201e-0033-27d7-1ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200253Z-17db6f7c8cfkzc2r8tan3gsa7n00000000yg00000000pspv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	61027	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:54 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 4901f262-b01e-0021-043a-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200254Z-185b7d577bdt2k4f7f9nr1pp7s00000002pg000000007tb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	61028	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:54 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:54 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 163cfe20-001e-0065-0a72-1a0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200254Z-185b7d577bdd97twt8zr6y8zrg00000002yg000000017fwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:54 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	61029	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:54 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200254Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000ng00000000yv5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	61030	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:54 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a9a22b8f-501e-007b-21d3-195ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200254Z-185b7d577bdd97twt8zr6y8zrg00000002z0000000017f79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:54 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200254Z-17db6f7c8cf96dsme4rhmefnfs00000000f0000000001usx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	61033	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:55 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:55 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f4abfb5c-001e-00a2-33e5-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200255Z-17db6f7c8cf5r84x48eqzcskcn00000000e0000000007qre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:02:55 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	61034	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:55 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 67f4a132-701e-0021-11f5-193d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200255Z-185b7d577bdd97twt8zr6y8zrg00000003500000000034cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	61036	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:55 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200255Z-17db6f7c8cf4g2pjavqhm24vp4000000010g00000000y2sm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:55 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	61035	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:55 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:55 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200255Z-17db6f7c8cfrbg6x0qcg5vwtus000000018g00000000bbdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:55 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	61037	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:55 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:55 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200255Z-17db6f7c8cfhzb2znbk0zyvf6n00000000g0000000004v0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:02:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	61038	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:56 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:56 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200256Z-17db6f7c8cf96dsme4rhmefnfs00000000e00000000028vr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:56 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	61039	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:56 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:56 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200256Z-17db6f7c8cf4g2pjavqhm24vp4000000014g000000007x8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	61040	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:56 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:56 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200256Z-17db6f7c8cfspvtq2pgqb2w5k000000000v0000000001v4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:56 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	61041	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:56 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200256Z-17db6f7c8cf9t48t10xeshst8c00000000qg000000013w7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	61043	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:56 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:56 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: fee23d9a-301e-0096-1cf8-19e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200256Z-185b7d577bd8m52vbwet1cqbbw000000033g00000000bbzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:56 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	61046	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 73914296-901e-0083-44fd-19bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-185b7d577bdd97twt8zr6y8zrg000000030000000001094z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	61044	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cfnqpbkckdefmqa4400000000wg00000000hqa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	61047	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cffjrz2m4352snqkw000000019g0000000064zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	61048	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cf9t48t10xeshst8c00000000s000000000u08y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	61045	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cf58jztrd88d8aypg00000000q000000000q4e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	61049	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c769d364-a01e-0032-511e-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cfp6q2mfn13vuw4ds00000000gg00000000cghx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	61050	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bf053e75-701e-000d-6f20-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cfspvtq2pgqb2w5k000000000t000000000c5ns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	61052	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95c9d568-c01e-00a1-6afa-197e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-185b7d577bdt2k4f7f9nr1pp7s00000002qg000000002q7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	61051	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cf96dsme4rhmefnfs00000000f0000000001v2p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	61053	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:58 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:58 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200258Z-17db6f7c8cfqkqk8bn4ck6f72000000000hg00000000h04x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	61055	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:59 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200259Z-17db6f7c8cfnqpbkckdefmqa4400000000tg00000000ybtr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	61056	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:59 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:59 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200259Z-17db6f7c8cfrbg6x0qcg5vwtus000000015g00000000vkxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:59 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	61054	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:59 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200259Z-17db6f7c8cfqxt4wrzg7st2fm800000000y000000000xqd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	61058	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:59 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:59 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e64af527-401e-0015-1bcc-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200259Z-17db6f7c8cffjrz2m4352snqkw000000015g00000000vd53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:59 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	61057	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:02:59 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:02:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:02:59 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200259Z-17db6f7c8cfhzb2znbk0zyvf6n00000000p0000000000szx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:02:59 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	61060	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:00 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 54149fda-b01e-0001-69e2-1a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200300Z-17db6f7c8cf5r84x48eqzcskcn00000000n00000000085p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:03:00 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	61061	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200300Z-17db6f7c8cfkzc2r8tan3gsa7n00000000xg00000000wkre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	61059	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:00 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200300Z-17db6f7c8cf5mtxmr1c51513n000000000yg0000000149fe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	61062	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:00 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5dd409ef-301e-0099-0e1e-1b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200300Z-17db6f7c8cfdpvbpevek8sv5g400000000r0000000012qa9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	61063	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:00 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200300Z-17db6f7c8cfnqpbkckdefmqa4400000000ug00000000spry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	61065	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:01 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:01 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200301Z-17db6f7c8cf5r84x48eqzcskcn00000000pg000000003vmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:03:01 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	61068	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:01 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:01 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200301Z-17db6f7c8cfspvtq2pgqb2w5k000000000pg00000000yer1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:01 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	61066	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:01 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 76375c60-d01e-0014-2f02-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200301Z-185b7d577bdd97twt8zr6y8zrg000000032g00000000k4dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	61067	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:01 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:01 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200301Z-185b7d577bdd97twt8zr6y8zrg00000002y000000001cg54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:01 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	61069	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-17db6f7c8cf7s6chrx36act2pg000000010g000000012rrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	61070	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-17db6f7c8cf58jztrd88d8aypg00000000kg00000000wpgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	61072	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-17db6f7c8cfqkqk8bn4ck6f72000000000mg00000000g4vs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	61071	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: ef53c767-f01e-0071-1df9-19431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-185b7d577bdd97twt8zr6y8zrg000000032000000000mub5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	61073	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:03 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-17db6f7c8cfhzb2znbk0zyvf6n00000000h0000000004wca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:03:03 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	61076	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:03 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-17db6f7c8cf7s6chrx36act2pg000000016g000000002ucs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:03 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	61074	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:02 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a41636a0-e01e-0051-20e2-1a84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200302Z-17db6f7c8cfvzwz27u5rnq9kpc000000014g00000000sgxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	61075	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:03 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:03 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200303Z-17db6f7c8cfnqpbkckdefmqa4400000000z0000000003yqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:03 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	61079	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:03 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:03 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:03 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200303Z-17db6f7c8cfrbg6x0qcg5vwtus0000000190000000008s4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:03 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	61077	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:03 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:03 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3d6ddcf7-401e-0047-76c9-198597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200303Z-185b7d577bdd97twt8zr6y8zrg00000003000000000109uz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:03 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	61078	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:03 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:03 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200303Z-17db6f7c8cfbtxhfpq53x2ehdn00000000rg000000011bg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:04 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	61080	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:04 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:04 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200304Z-17db6f7c8cf96dsme4rhmefnfs00000000g0000000001zha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:04 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	61081	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:04 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:04 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200304Z-17db6f7c8cfspvtq2pgqb2w5k000000000ug000000003ztr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:04 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	61082	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:04 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:04 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 05161790-801e-002a-4e75-1a31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200304Z-185b7d577bdt2k4f7f9nr1pp7s00000002k000000000ucgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	61083	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:04 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:04 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:04 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200304Z-17db6f7c8cf96dsme4rhmefnfs00000000hg000000001veu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:04 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	61084	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:05 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:05 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 49d16118-701e-006f-1f80-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200305Z-185b7d577bd8m52vbwet1cqbbw000000030000000000vqnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	61086	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:05 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 142f9b94-401e-0035-4acf-1982d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200305Z-185b7d577bdd97twt8zr6y8zrg0000000300000000010a21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	61087	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:05 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200305Z-17db6f7c8cf5mtxmr1c51513n0000000014g0000000055ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	61088	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:05 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:05 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200305Z-17db6f7c8cfqkqk8bn4ck6f72000000000m000000000fyzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	61091	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200306Z-17db6f7c8cf9t48t10xeshst8c00000000q0000000015as4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:06 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	61064	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:06 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200306Z-17db6f7c8cf96dsme4rhmefnfs00000000gg000000001yqh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:06 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	61094	104.21.81.229	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	668	OUT	POST /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://15a69upw.1bigcircle.com:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:03:06 UTC	40	OUT	Data Raw: 75 73 72 6e 3d 64 6f 6e 2e 64 65 67 6c 6f 72 69 61 25 34 30 65 76 65 72 62 72 69 64 67 65 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=don.degloria%40everbridge.com&psrd=
2024-10-10 20:03:06 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYAsesdKMMV4lWg6ibj%2BoADbmPrkfvFafTWmZKI3QpSaD6pFX0RHPUkyjozFiltY5lrYRTCSva4xllhQXYi%2Bt3sODqttC%2FK3pfrMSHrhYdZ0jiml7Tsn9atrP4R96CS93i%2BDn54D1il33fQu5aFSo2c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d09363d182843a0-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:03:06 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:03:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	61095	104.21.81.229	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	668	OUT	POST /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://15a69upw.1bigcircle.com:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://15a69upw.1bigcircle.com:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:03:06 UTC	40	OUT	Data Raw: 75 73 72 6e 3d 64 6f 6e 2e 64 65 67 6c 6f 72 69 61 25 34 30 65 76 65 72 62 72 69 64 67 65 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=don.degloria%40everbridge.com&psrd=
2024-10-10 20:03:06 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7uE9xI5MMjLaKNzyExL5korvq%2BAVcb42BG9ThrVN0873PWDWoFpLLD0X7FbPgxLsaXaKijfxe0HOmanLhBzK%2FjB5cqkI1SWBBEDD3YVfGHKAOYajSvhss3VT%2BeLxw1qbXbgqWjCZDDqrNdjDYBYAldY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d09363d28524369-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:03:06 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:03:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	61093	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:06 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200306Z-17db6f7c8cfqkqk8bn4ck6f72000000000h000000000gubs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:06 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	61092	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7c7d4b66-601e-0001-1684-1afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200306Z-185b7d577bd8m52vbwet1cqbbw00000002zg00000000yvhq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:06 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	61096	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:06 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:06 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:06 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200306Z-17db6f7c8cfqxt4wrzg7st2fm800000000x0000000014d6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:06 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	61097	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:07 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f659b87d-a01e-0002-04d9-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200307Z-17db6f7c8cfdpvbpevek8sv5g400000000t000000000ukge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:07 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	61098	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:07 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 93575ddb-301e-001f-5b98-1aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200307Z-185b7d577bdt2k4f7f9nr1pp7s00000002p0000000009592 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:07 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	61102	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:07 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200307Z-17db6f7c8cf9t48t10xeshst8c00000000ug00000000bqk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:07 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	61100	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:07 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: b398d7ec-f01e-0052-078c-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200307Z-185b7d577bdd97twt8zr6y8zrg000000032000000000muvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:07 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	61099	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:07 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:07 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 54013aee-c01e-0079-7db5-19e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200307Z-185b7d577bdt2k4f7f9nr1pp7s00000002hg00000000wnvf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:07 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	61103	172.67.165.105	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	368	OUT	GET /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:03:08 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jcl3gG9NvlFOhfw4r3f0DbS9gc8XlKxQoHRSanh8UzGTSuWV2T5RebMBp38LO%2Bzc%2FKUuVz%2BYr3jL15GXxR7JQ4iAoGlr4lm%2FithNIUNtJZdLXBWnXfp5BgrOpJ0crPpWUnW2J4ztC56Kxv8MZSwxAkc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d093645deee32f4-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:03:08 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:03:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	61104	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-17db6f7c8cfp6q2mfn13vuw4ds00000000pg000000008vgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	61106	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 48dac480-001e-002b-1ab7-1999f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-185b7d577bd8m52vbwet1cqbbw000000031000000000uc42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	61107	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-17db6f7c8cf5r84x48eqzcskcn00000000hg000000007hq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:08 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	61105	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fd1eaa3c-c01e-0034-22e2-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-17db6f7c8cfkzc2r8tan3gsa7n00000000z000000000mf8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:08 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	61108	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6172f31e-101e-00a2-6a06-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-185b7d577bdd97twt8zr6y8zrg00000002z0000000017gdq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	61110	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:08 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-17db6f7c8cfdpvbpevek8sv5g400000000sg00000000ws0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:08 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	61112	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cf96dsme4rhmefnfs00000000mg0000000022yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	61113	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2d3659d2-d01e-0066-1cca-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-17db6f7c8cf58jztrd88d8aypg00000000t00000000073h1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	61111	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:08 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200308Z-17db6f7c8cf58jztrd88d8aypg00000000rg00000000ech5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	61115	172.67.165.105	443	5000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:08 UTC	368	OUT	GET /app/stiktk.php HTTP/1.1 Host: fondation.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 20:03:09 UTC	796	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BD9S5Z0drTp3rUJBKH%2FeTqADK%2Bz%2BXZyWxVlItxWLrdjuHUlYFESf6jppSdLQeDncyAAXII7Aoi63IxWWayuzUPAQgRWvoyFjE2%2B3%2FASc1H5fYVEsDPO9ntQDQX%2B05lxAx7jLhY%2FFqG%2FZt%2FzlYmhaVu0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d09364daf8e729f-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 20:03:09 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-10-10 20:03:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	61114	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:09 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cf96dsme4rhmefnfs00000000g0000000001zva x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	61116	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:09 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cfqkqk8bn4ck6f72000000000fg00000000gewx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	61118	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:09 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 03f8bcf3-701e-0098-27e6-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cffjrz2m4352snqkw000000015000000000y33r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	61119	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:09 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 083451f6-401e-0035-25c0-1a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cf4g2pjavqhm24vp400000000z0000000015pmb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	61117	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:09 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ecaa5255-c01e-008d-52bf-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cfhzb2znbk0zyvf6n00000000g0000000004w1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	61120	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:09 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:09 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:09 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200309Z-17db6f7c8cfvzwz27u5rnq9kpc000000017g000000008waq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:09 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	61121	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:10 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200310Z-17db6f7c8cfspvtq2pgqb2w5k000000000p000000000z8w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	61124	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:10 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:10 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: c08f385d-301e-0033-1fca-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200310Z-17db6f7c8cf4g2pjavqhm24vp40000000160000000000m17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:10 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	61123	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:10 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:10 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:10 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200310Z-17db6f7c8cf5r84x48eqzcskcn00000000hg000000007hv2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:10 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	61122	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:10 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: df344972-701e-001e-12cd-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200310Z-17db6f7c8cfdpvbpevek8sv5g400000000t000000000ukrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	61125	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:10 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:10 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200310Z-17db6f7c8cfbtxhfpq53x2ehdn00000000s000000000z14v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	61126	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:11 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 03a639d1-101e-008d-40f2-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200311Z-17db6f7c8cfvzwz27u5rnq9kpc000000014g00000000shph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	61127	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:11 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: a9076f8e-601e-0002-6a74-1aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200311Z-185b7d577bdt2k4f7f9nr1pp7s00000002mg00000000k8ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	61128	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:11 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:11 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200311Z-17db6f7c8cfp6q2mfn13vuw4ds00000000g000000000cvz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:11 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	61129	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:11 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:11 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:11 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 08565fb3-401e-0029-27c4-1a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200311Z-17db6f7c8cfhzb2znbk0zyvf6n00000000d0000000004k1b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:11 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	61130	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:11 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:11 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:11 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200311Z-17db6f7c8cf58jztrd88d8aypg00000000q000000000q5tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:11 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	61131	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:11 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:11 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ecb94678-501e-0035-51d8-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200311Z-17db6f7c8cfvzwz27u5rnq9kpc000000014g00000000shs6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:12 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	61132	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:12 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:12 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e28c1875-001e-00ad-40e2-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200312Z-17db6f7c8cfhzb2znbk0zyvf6n00000000p0000000000u4r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:12 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	61133	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:12 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:12 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 33c14fe4-301e-001f-2cee-1aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200312Z-17db6f7c8cf96dsme4rhmefnfs00000000h00000000029bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 20:03:12 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	61134	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:12 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:12 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 4a4b6355-301e-0051-1bce-1a38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200312Z-17db6f7c8cfrbg6x0qcg5vwtus000000018g00000000bcxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:12 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	61135	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:12 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:12 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200312Z-17db6f7c8cfp6q2mfn13vuw4ds00000000g000000000cw10 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:12 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	61136	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:12 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:12 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 18adff54-401e-008c-27da-1a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200312Z-17db6f7c8cffjrz2m4352snqkw000000014g00000000zqky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:12 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	61137	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:12 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:12 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200312Z-17db6f7c8cfc2wfd9vsg5mq3ww00000000u00000000056y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:13 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	61138	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:13 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:13 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f766e345-d01e-0014-78e6-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200313Z-17db6f7c8cffjrz2m4352snqkw000000017g00000000fs81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:13 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	61139	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 20:03:13 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 20:03:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 20:03:13 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T200313Z-17db6f7c8cf5r84x48eqzcskcn00000000fg000000007qgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 20:03:13 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	16:01:47
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\View alert details #20GBQ4J.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:01:49
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1892,i,15348987609374010352,5781794528145663167,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Joe Sandbox View	IP Address: 192.229.133.221 192.229.133.221
Source: Joe Sandbox View	IP Address: 108.178.43.142 108.178.43.142
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: file:///C:/Users/user/Desktop/View%20alert%20details%20%2320GBQ4J.html	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/View%20alert%20details%20%2320GBQ4J.html	HTTP Parser: New script tag found

Source: View alert details #20GBQ4J.html	HTTP Parser: .location
Source: View alert details #20GBQ4J.html	HTTP Parser: .location

Source: View alert details #20GBQ4J.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/View%20alert%20details%20%2320GBQ4J.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/View%20alert%20details%20%2320GBQ4J.html	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.4:49737 -> 188.114.96.3:8443
Source: global traffic	TCP traffic: 192.168.2.4:49747 -> 188.114.97.3:8443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: 15a69upw.1bigcircle.com
Source: global traffic	DNS traffic detected: DNS query: _8443._https.15a69upw.1bigcircle.com
Source: global traffic	DNS traffic detected: DNS query: www.w3schools.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: kasumbo.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: fondation.chiliesdigital.co.za

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report View alert details #20GBQ4J.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1590027324\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\Filtering Rules

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\LICENSE.txt

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1764941601\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\_platform_specific\win_x64\widevinecdm.dll.sig

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_1890331303\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping888_2097725419\sets.json

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Windows Analysis Report
View alert details #20GBQ4J.html